[cas-user] Pac4j integration issue - Tomcat7 is no more starting - class "org.bouncycastle.util.Arrays"'s signer information does not match signer information

[Denis BLED]

Hi,

My CAS Server is working fine and I am trying to make it evolve to implement OAuth using pac4j...

I am using the tutorial: https://wiki.jasig.org/pages/viewpage.action?pageId=56164890

I have declared dependencies in the "pom.xml" to support pac4j:

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
  <parent>
    <groupId>org.jasig.cas</groupId>
    <artifactId>cas-server</artifactId>
    <version>4.1.0-SNAPSHOT</version>
  </parent>
  <modelVersion>4.0.0</modelVersion>
  <artifactId>cas-server-webapp</artifactId>
  <packaging>war</packaging>
  <name>Apereo CAS Web Application</name>
  <dependencies>
    <dependency>
      <groupId>org.jasig.cas</groupId>
      <artifactId>cas-server-webapp-support</artifactId>
      <version>${project.version}</version>
      <scope>compile</scope>
    </dependency>
        <dependency>
      <groupId>org.jasig.cas</groupId>
      <artifactId>cas-server-support-pac4j</artifactId>
      <version>${project.version}</version>
    </dependency>
    <dependency>
      <groupId>org.pac4j</groupId>
      <artifactId>pac4j-cas</artifactId>
      <version>1.6.1-SNAPSHOT</version>
      <exclusions>
            <exclusion>
            <groupId>log4j</groupId>
            <artifactId>log4j</artifactId>
            </exclusion>
            <exclusion>
            <groupId>org.slf4j</groupId>
            <artifactId>log4j-over-slf4j</artifactId>
            </exclusion>
            <exclusion>
            <groupId>org.slf4j</groupId>
            <artifactId>slf4j-log4j12</artifactId>
            </exclusion>
        </exclusions>
    </dependency>
    <dependency>
      <groupId>org.pac4j</groupId>
      <artifactId>pac4j-oauth</artifactId>
      <version>1.6.1-SNAPSHOT</version>
    </dependency>
    <dependency>
      <groupId>org.pac4j</groupId>
      <artifactId>pac4j-core</artifactId>
      <version>1.6.1-SNAPSHOT</version>
    </dependency>

[...]

And Tomcat7 does not start anymore :-(

2015-02-09 16:28:31,788 WARN [org.springframework.web.context.support.XmlWebApplicationContext] - <Exception encountered during context initialization - cancelling refresh attempt
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'loginHandlerAdapter' defined in ServletContext resource [/WEB-INF/cas-servlet.xml]: Cannot resolve reference to bean 'loginFlowExecutor' while setting bean property 'flowExecutor'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'loginFlowExecutor' defined in ServletContext resource [/WEB-INF/cas-servlet.xml]: Cannot resolve reference to bean 'loginFlowExecutionFactory' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'loginFlowExecutionFactory' defined in ServletContext resource [/WEB-INF/cas-servlet.xml]: Cannot resolve reference to bean 'loginFlowExecutionRepository' while setting bean property 'executionKeyFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'loginFlowExecutionRepository' defined in ServletContext resource [/WEB-INF/cas-servlet.xml]: Cannot resolve reference to bean 'loginFlowStateTranscoder' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'loginFlowStateTranscoder' defined in ServletContext resource [/WEB-INF/cas-servlet.xml]: Instantiation of bean failed; nested exception is org.springframework.beans.BeanInstantiationException: Could not instantiate bean class [org.jasig.spring.webflow.plugin.EncryptedTranscoder]: Constructor threw exception; nested exception is java.lang.SecurityException: class "org.bouncycastle.util.Arrays"'s signer information does not match signer information of other classes in the same package
    at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:336)
    at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:108)


I have been going through this post: http://jasig.275507.n4.nabble.com/CAS-4-1-issue-with-the-webflow-stored-on-client-side-td4664313.html
which seems to be a similar issue, but I have not understood how to integrate it.

If you have any idea, please tell me :-)

Thank you very much for your return.

Denis

[Denis BLED]

Hi,

I have finally found in the Demo source code the answer. See below modifications on Pom.xml

<dependency>
      <groupId>org.pac4j</groupId>
      <artifactId>pac4j-cas</artifactId>
      <version>1.6.1-SNAPSHOT</version>
      <exclusions>
            <exclusion>
            <groupId>log4j</groupId>
            <artifactId>log4j</artifactId>
            </exclusion>
            <exclusion>
            <groupId>org.slf4j</groupId>
            <artifactId>log4j-over-slf4j</artifactId>
            </exclusion>
            <exclusion>
            <groupId>org.slf4j</groupId>
            <artifactId>slf4j-log4j12</artifactId>
            </exclusion>

            <exclusion>
                    <groupId>org.bouncycastle</groupId>
                    <artifactId>bcprov-jdk15</artifactId>
            </exclusion>
        </exclusions>
    </dependency>

Hope this help.

Regards,
Denis