You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@brooklyn.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2016/07/12 18:56:20 UTC
[jira] [Commented] (BROOKLYN-218)
java.security.KeyException/SSLException from jclouds (needing nss update)
[ https://issues.apache.org/jira/browse/BROOKLYN-218?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15373464#comment-15373464 ]
ASF GitHub Bot commented on BROOKLYN-218:
-----------------------------------------
GitHub user aledsage opened a pull request:
https://github.com/apache/brooklyn-docs/pull/89
BROOKLYN-218: document nss upgrade to avoid KeyException
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/aledsage/brooklyn-docs BROOKLYN-218
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/brooklyn-docs/pull/89.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #89
----
commit db76a6bebaf45707d3de2d2acc875fe18e056759
Author: Aled Sage <al...@gmail.com>
Date: 2016-07-12T18:54:56Z
BROOKLYN-218: document nss upgrade to avoid KeyException
----
> java.security.KeyException/SSLException from jclouds (needing nss update)
> -------------------------------------------------------------------------
>
> Key: BROOKLYN-218
> URL: https://issues.apache.org/jira/browse/BROOKLYN-218
> Project: Brooklyn
> Issue Type: Bug
> Environment: CentOS 6.6, with nss 3.14, running brooklyn 0.9.0-SNAPSHOT
> Reporter: Aled Sage
> Priority: Minor
>
> With Brooklyn 0.9.0-SNAPSHOT installed on CentOS 6.6, when trying to deploy to Numergy (an OpenStack cloud), it failed with the exception shown below:
> {noformat}
> 2016-01-23 11:21:46,839 WARN o.a.b.l.j.JcloudsLocation [brooklyn-execmanager-yXtsbB8j-44]: IOException found...
> javax.net.ssl.SSLException: java.security.ProviderException: java.security.KeyException
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208) ~[na:1.7.0_95]
> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1916) ~[na:1.7.0_95]
> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1874) ~[na:1.7.0_95]
> at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1857) ~[na:1.7.0_95]
> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1378) ~[na:1.7.0_95]
> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1355) ~[na:1.7.0_95]
> at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) ~[na:1.7.0_95]
> at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) ~[na:1.7.0_95]
> at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1093) ~[na:1.7.0_95]
> at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250) ~[na:1.7.0_95]
> at org.jclouds.http.internal.JavaUrlHttpCommandExecutorService.writePayloadToConnection(JavaUrlHttpCommandExecutorService.java:294) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.http.internal.JavaUrlHttpCommandExecutorService.convert(JavaUrlHttpCommandExecutorService.java:170) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.http.internal.JavaUrlHttpCommandExecutorService.convert(JavaUrlHttpCommandExecutorService.java:64) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.http.internal.BaseHttpCommandExecutorService.invoke(BaseHttpCommandExecutorService.java:95) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.internal.InvokeHttpMethod.invoke(InvokeHttpMethod.java:90) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.internal.InvokeHttpMethod.apply(InvokeHttpMethod.java:73) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.internal.InvokeHttpMethod.apply(InvokeHttpMethod.java:44) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.internal.DelegatesToInvocationFunction.handle(DelegatesToInvocationFunction.java:156) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.internal.DelegatesToInvocationFunction.invoke(DelegatesToInvocationFunction.java:123) ~[jclouds-core-1.9.2.jar:1.9.2]
> at com.sun.proxy.$Proxy171.authenticateWithTenantNameAndCredentials(Unknown Source) ~[na:na]
> at org.jclouds.openstack.keystone.v2_0.functions.AuthenticatePasswordCredentials.authenticateWithTenantName(AuthenticatePasswordCredentials.java:43) ~[openstack-keystone-1.9.2.jar:1.9.2]
> at org.jclouds.openstack.keystone.v2_0.functions.AuthenticatePasswordCredentials.authenticateWithTenantName(AuthenticatePasswordCredentials.java:31) ~[openstack-keystone-1.9.2.jar:1.9.2]
> at org.jclouds.openstack.keystone.v2_0.functions.internal.BaseAuthenticator.apply(BaseAuthenticator.java:79) ~[openstack-keystone-1.9.2.jar:1.9.2]
> at org.jclouds.openstack.keystone.v2_0.functions.internal.BaseAuthenticator.apply(BaseAuthenticator.java:36) ~[openstack-keystone-1.9.2.jar:1.9.2]
> at com.google.common.cache.CacheLoader$FunctionToCacheLoader.load(CacheLoader.java:151) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3524) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2317) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2280) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2195) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache.get(LocalCache.java:3934) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:3938) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4821) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$LocalLoadingCache.getUnchecked(LocalCache.java:4827) ~[guava-17.0.jar:na]
> at org.jclouds.openstack.keystone.v2_0.config.KeystoneAuthenticationModule$2.get(KeystoneAuthenticationModule.java:234) ~[openstack-keystone-1.9.2.jar:1.9.2]
> at org.jclouds.openstack.keystone.v2_0.config.KeystoneAuthenticationModule$2.get(KeystoneAuthenticationModule.java:231) ~[openstack-keystone-1.9.2.jar:1.9.2]
> at org.jclouds.openstack.keystone.v2_0.suppliers.LocationIdToURIFromAccessForTypeAndVersion.get(LocationIdToURIFromAccessForTypeAndVersion.java:94) ~[openstack-keystone-1.9.2.jar:1.9.2]
> at org.jclouds.openstack.keystone.v2_0.suppliers.LocationIdToURIFromAccessForTypeAndVersion.get(LocationIdToURIFromAccessForTypeAndVersion.java:54) ~[openstack-keystone-1.9.2.jar:1.9.2]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier$SetAndThrowAuthorizationExceptionSupplierBackedLoader.load(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:73) ~[
> jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier$SetAndThrowAuthorizationExceptionSupplierBackedLoader.load(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:57) ~[
> jclouds-core-1.9.2.jar:1.9.2]
> at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3524) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2317) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2280) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2195) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache.get(LocalCache.java:3934) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:3938) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4821) ~[guava-17.0.jar:na]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.get(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:119) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.location.suppliers.derived.RegionIdsFromRegionIdToURIKeySet.get(RegionIdsFromRegionIdToURIKeySet.java:45) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.location.suppliers.derived.RegionIdsFromRegionIdToURIKeySet.get(RegionIdsFromRegionIdToURIKeySet.java:33) ~[jclouds-core-1.9.2.jar:1.9.2]
> at com.google.common.base.Suppliers$SupplierComposition.get(Suppliers.java:67) ~[guava-17.0.jar:na]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier$SetAndThrowAuthorizationExceptionSupplierBackedLoader.load(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:73) ~[
> jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier$SetAndThrowAuthorizationExceptionSupplierBackedLoader.load(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:57) ~[
> jclouds-core-1.9.2.jar:1.9.2]
> at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3524) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2317) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2280) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2195) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache.get(LocalCache.java:3934) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:3938) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4821) ~[guava-17.0.jar:na]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.get(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:119) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.location.suppliers.all.RegionToProvider.get(RegionToProvider.java:58) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.location.suppliers.all.RegionToProvider.get(RegionToProvider.java:40) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier$SetAndThrowAuthorizationExceptionSupplierBackedLoader.load(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:73) ~[
> jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier$SetAndThrowAuthorizationExceptionSupplierBackedLoader.load(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:57) ~[
> jclouds-core-1.9.2.jar:1.9.2]
> at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3524) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2317) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2280) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2195) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache.get(LocalCache.java:3934) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:3938) ~[guava-17.0.jar:na]
> at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4821) ~[guava-17.0.jar:na]
> at org.jclouds.rest.suppliers.MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.get(MemoizedRetryOnTimeOutButNotOnAuthorizationExceptionSupplier.java:119) ~[jclouds-core-1.9.2.jar:1.9.2]
> at org.jclouds.compute.domain.internal.TemplateBuilderImpl.locationId(TemplateBuilderImpl.java:624) ~[jclouds-compute-1.9.2.jar:1.9.2]
> at org.apache.brooklyn.location.jclouds.templates.AbstractPortableTemplateBuilder$8.apply(AbstractPortableTemplateBuilder.java:135) ~[brooklyn-locations-jclouds-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.location.jclouds.templates.AbstractPortableTemplateBuilder$8.apply(AbstractPortableTemplateBuilder.java:134) ~[brooklyn-locations-jclouds-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.location.jclouds.templates.PortableTemplateBuilder.newJcloudsTemplateBuilder(PortableTemplateBuilder.java:61) ~[brooklyn-locations-jclouds-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.location.jclouds.templates.PortableTemplateBuilder.newJcloudsTemplate(PortableTemplateBuilder.java:70) ~[brooklyn-locations-jclouds-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.location.jclouds.templates.PortableTemplateBuilder.build(PortableTemplateBuilder.java:48) ~[brooklyn-locations-jclouds-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.location.jclouds.JcloudsLocation.buildTemplate(JcloudsLocation.java:1506) [brooklyn-locations-jclouds-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.location.jclouds.JcloudsLocation.obtainOnce(JcloudsLocation.java:679) [brooklyn-locations-jclouds-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.location.jclouds.JcloudsLocation.obtain(JcloudsLocation.java:611) [brooklyn-locations-jclouds-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.entity.software.base.lifecycle.MachineLifecycleEffectorTasks$ObtainLocationTask.call(MachineLifecycleEffectorTasks.java:406) [brooklyn-software-base-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.entity.software.base.lifecycle.MachineLifecycleEffectorTasks$ObtainLocationTask.call(MachineLifecycleEffectorTasks.java:396) [brooklyn-software-base-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.util.core.task.Tasks.withBlockingDetails(Tasks.java:98) [brooklyn-core-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.entity.software.base.lifecycle.MachineLifecycleEffectorTasks$ProvisionMachineTask.call(MachineLifecycleEffectorTasks.java:380) [brooklyn-software-base-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.entity.software.base.lifecycle.MachineLifecycleEffectorTasks$ProvisionMachineTask.call(MachineLifecycleEffectorTasks.java:364) [brooklyn-software-base-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.util.core.task.DynamicSequentialTask$DstJob.call(DynamicSequentialTask.java:359) [brooklyn-core-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at org.apache.brooklyn.util.core.task.BasicExecutionManager$SubmissionCallable.call(BasicExecutionManager.java:499) [brooklyn-core-0.9.0-20160121.1603.jar:0.9.0-20160121.1603]
> at java.util.concurrent.FutureTask.run(FutureTask.java:262) [na:1.7.0_95]
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [na:1.7.0_95]
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [na:1.7.0_95]
> at java.lang.Thread.run(Thread.java:745) [na:1.7.0_95]
> Caused by: java.security.ProviderException: java.security.KeyException
> at sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:146) ~[sunec.jar:1.7.0_95]
> at java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:704) ~[na:1.7.0_95]
> at sun.security.ssl.ECDHCrypt.<init>(ECDHCrypt.java:78) ~[na:1.7.0_95]
> at sun.security.ssl.ClientHandshaker.serverKeyExchange(ClientHandshaker.java:717) ~[na:1.7.0_95]
> at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:278) ~[na:1.7.0_95]
> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:913) ~[na:1.7.0_95]
> at sun.security.ssl.Handshaker.process_record(Handshaker.java:849) ~[na:1.7.0_95]
> at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1035) ~[na:1.7.0_95]
> at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1344) ~[na:1.7.0_95]
> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1371) ~[na:1.7.0_95]
> ... 87 common frames omitted
> Caused by: java.security.KeyException: null
> at sun.security.ec.ECKeyPairGenerator.generateECKeyPair(Native Method) ~[sunec.jar:1.7.0_95]
> at sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:126) ~[sunec.jar:1.7.0_95]
> ... 96 common frames omitted
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)