Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tomcat proxycas - remove 8443 SSL port #115

Open
pmauduit opened this issue Mar 30, 2023 · 2 comments
Open

tomcat proxycas - remove 8443 SSL port #115

pmauduit opened this issue Mar 30, 2023 · 2 comments

Comments

@pmauduit
Copy link
Member

It is not in use anymore, and it makes the serverspec testsuite fail:

  1) Port "8443" is expected to be listening
     On host `georchestra'
     Failure/Error: it { should be_listening }
       expected Port "8443" to be listening
       /bin/sh -c ss\ -tunl\ \|\ grep\ -E\ --\ :8443\\\ 
       
     # ./spec/georchestra/georchestra_spec.rb:52:in `block (2 levels) in <top (required)>'

@landryb
Copy link
Member

landryb commented Mar 30, 2023

ok to remove, but why is the testsuite failing ? 4f91386 still leaves it listening afaict...

@pmauduit
Copy link
Member Author

because there is an issue with the certificates / private key pair, and tomcat is unable to configure the connector correctly:

<2>Failed to initialize component [Connector[HTTP/1.1-8443]]
<2>org.apache.catalina.LifecycleException: Protocol handler initialization failed
<2>    at org.apache.catalina.connector.Connector.initInternal(Connector.java:1049)
<2>    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
<2>    at org.apache.catalina.core.StandardService.initInternal(StandardService.java:558)
<2>    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
<2>    at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:1045)
<2>    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
<2>    at org.apache.catalina.startup.Catalina.load(Catalina.java:724)
<2>    at org.apache.catalina.startup.Catalina.load(Catalina.java:746)
<2>    at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
<2>    at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
<2>    at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
<2>    at java.base/java.lang.reflect.Method.invoke(Method.java:566)
<2>    at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:302)
<2>    at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:472)
<2>Caused by: java.lang.IllegalArgumentException: Alias name [null] does not identify a key entry
<2>    at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:99)
<2>    at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:71)
<2>    at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:246)
<2>    at org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup(AbstractEndpoint.java:1193)
<2>    at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1206)
<2>    at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:597)
<2>    at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:80)
<2>    at org.apache.catalina.connector.Connector.initInternal(Connector.java:1046)
<2>    ... 13 more
<2>Caused by: java.io.IOException: Alias name [null] does not identify a key entry
<2>    at org.apache.tomcat.util.net.SSLUtilBase.getKeyManagers(SSLUtilBase.java:349)
<2>    at org.apache.tomcat.util.net.SSLUtilBase.createSSLContext(SSLUtilBase.java:246)
<2>    at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:97)
<2>    ... 20 more
<2>

pmauduit added a commit that referenced this issue Apr 11, 2023
Note: there are still some occurences for "8443" in the repository, but
related to the redirectPort, and even if I am not sure if this is still
needed, I think it comes from the default tomcat configuration. I am
pretty sure we can leave them as they are, as it won't harm. In the
other tomcat configurations, they appear in a commented block.

Also I kept all the logic of trusting the generated self signed
certificate, because I think it should be still in use by the JVM /
server-to-server communication.
landryb pushed a commit that referenced this issue Apr 11, 2023
Note: there are still some occurences for "8443" in the repository, but
related to the redirectPort, and even if I am not sure if this is still
needed, I think it comes from the default tomcat configuration. I am
pretty sure we can leave them as they are, as it won't harm. In the
other tomcat configurations, they appear in a commented block.

Also I kept all the logic of trusting the generated self signed
certificate, because I think it should be still in use by the JVM /
server-to-server communication.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants