<div dir="ltr">Thanks for update, Bruno. I will try it and let you know.</div><br><div class="gmail_quote">po 6. 4. 2015 v 19:14 odesílatel Bruno Oliveira <<a href="mailto:bruno@abstractj.org">bruno@abstractj.org</a>> napsal:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">A little update, if you're willing to deploy UPS on Openshift:<br>
<a href="https://issues.jboss.org/browse/AGPUSH-1352" target="_blank">https://issues.jboss.org/<u></u>browse/AGPUSH-1352</a><br>
<br>
On 2015-04-02, Sebastien Blanc wrote:<br>
> Thx for the headup !<br>
> When did this upgrade happened ?<br>
> Shouldn't we have the problem also with UPS 1.0.x series on OpenShift ?<br>
><br>
> On Thu, Apr 2, 2015 at 2:55 PM, Bruno Oliveira <<a href="mailto:bruno@abstractj.org" target="_blank">bruno@abstractj.org</a>> wrote:<br>
><br>
> > Good morning guys, I'm investigating the problem since yesterday. The<br>
> > problem at first glance is related with the upgrade on OpenShift to Java 8.<br>
> ><br>
> > Java 8 sends TLSv1.2 ClientHello and Java 7 TLSv1 and if the server<br>
> > somehow does not support version 1.2, it should be able to negotiate down<br>
> > to 1.1 or 1.0.<br>
> ><br>
> > I'm still investigating the root cause, but the immediate fix is to run KC<br>
> > and UPS on JDK 1.7 only. Meanwhile I will be investigating the issue.<br>
> ><br>
> > On Tue, Mar 31, 2015 at 11:10 AM, Matthias Wessendorf <<a href="mailto:matzew@apache.org" target="_blank">matzew@apache.org</a>><br>
> > wrote:<br>
> ><br>
> >> that is on a totally different KC version<br>
> >><br>
> >> On Tue, Mar 31, 2015 at 4:03 PM, Sebastien Blanc <<a href="mailto:scm.blanc@gmail.com" target="_blank">scm.blanc@gmail.com</a>><br>
> >> wrote:<br>
> >><br>
> >>> Maybe,<br>
> >>> But it may also be that I'm missing something stupid :) and I have to<br>
> >>> configure something extra since openshift is https and I always test<br>
> >>> locally ... But yeah for 1.0.x I did not have to do anything.<br>
> >>><br>
> >>><br>
> >>> On Tue, Mar 31, 2015 at 3:52 PM, Matthias Wessendorf <<a href="mailto:matzew@apache.org" target="_blank">matzew@apache.org</a>><br>
> >>> wrote:<br>
> >>><br>
> >>>> anything wrong w/ the keycloak adapter, or was there a fix for a 1.1.1?<br>
> >>>><br>
> >>>> On Tue, Mar 31, 2015 at 3:50 PM, Sebastien Blanc <<a href="mailto:scm.blanc@gmail.com" target="_blank">scm.blanc@gmail.com</a>><br>
> >>>> wrote:<br>
> >>>><br>
> >>>>> Hi !<br>
> >>>>> I was trying (and so was Lukas) to deploy UPS 1.1 (master branch) to<br>
> >>>>> an openshift gear (Wildfly 8.2 cartridge). After tweaking a bit the<br>
> >>>>> datasources to get it deployed, when trying to access /ag-push , I'm get an<br>
> >>>>> 500 internal server error.<br>
> >>>>><br>
> >>>>> The wildfly logs show me the following :<br>
> >>>>><br>
> >>>>> 2015-03-31 09:40:47,240 ERROR [io.undertow.request] (default task-8) UT005023: Exception handling request to /ag-push/index.html: java.lang.RuntimeException: Unable to resolve realm public key remotely<br>
> >>>>> at org.keycloak.adapters.<u></u>AdapterDeploymentContext.<u></u>resolveRealmKey(<u></u>AdapterDeploymentContext.java:<u></u>134) [keycloak-adapter-core-1.1.0.<u></u>Final.jar:1.1.0.Final]<br>
> >>>>> at org.keycloak.adapters.<u></u>AdapterDeploymentContext.<u></u>resolveDeployment(<u></u>AdapterDeploymentContext.java:<u></u>83) [keycloak-adapter-core-1.1.0.<u></u>Final.jar:1.1.0.Final]<br>
> >>>>> at org.keycloak.adapters.<u></u>PreAuthActionsHandler.<u></u>preflightCors(<u></u>PreAuthActionsHandler.java:71) [keycloak-adapter-core-1.1.0.<u></u>Final.jar:1.1.0.Final]<br>
> >>>>> at org.keycloak.adapters.<u></u>PreAuthActionsHandler.<u></u>handleRequest(<u></u>PreAuthActionsHandler.java:47) [keycloak-adapter-core-1.1.0.<u></u>Final.jar:1.1.0.Final]<br>
> >>>>> at org.keycloak.adapters.<u></u>undertow.<u></u>ServletPreAuthActionsHandler.<u></u>handleRequest(<u></u>ServletPreAuthActionsHandler.<u></u>java:68) [keycloak-undertow-adapter-1.<u></u>1.0.Final.jar:1.1.0.Final]<br>
> >>>>> at io.undertow.server.handlers.<u></u>PredicateHandler.<u></u>handleRequest(<u></u>PredicateHandler.java:43) [undertow-core-1.1.0.Final.<u></u>jar:1.1.0.Final]<br>
> >>>>> at io.undertow.servlet.handlers.<u></u>ServletInitialHandler.<u></u>handleFirstRequest(<u></u>ServletInitialHandler.java:<u></u>261) [undertow-servlet-1.1.0.Final.<u></u>jar:1.1.0.Final]<br>
> >>>>> at io.undertow.servlet.handlers.<u></u>ServletInitialHandler.<u></u>dispatchRequest(<u></u>ServletInitialHandler.java:<u></u>247) [undertow-servlet-1.1.0.Final.<u></u>jar:1.1.0.Final]<br>
> >>>>> at io.undertow.servlet.handlers.<u></u>ServletInitialHandler.access$<u></u>000(ServletInitialHandler.<u></u>java:76) [undertow-servlet-1.1.0.Final.<u></u>jar:1.1.0.Final]<br>
> >>>>> at io.undertow.servlet.handlers.<u></u>ServletInitialHandler$1.<u></u>handleRequest(<u></u>ServletInitialHandler.java:<u></u>166) [undertow-servlet-1.1.0.Final.<u></u>jar:1.1.0.Final]<br>
> >>>>> at io.undertow.server.Connectors.<u></u>executeRootHandler(Connectors.<u></u>java:197) [undertow-core-1.1.0.Final.<u></u>jar:1.1.0.Final]<br>
> >>>>> at io.undertow.server.<u></u>HttpServerExchange$1.run(<u></u>HttpServerExchange.java:759) [undertow-core-1.1.0.Final.<u></u>jar:1.1.0.Final]<br>
> >>>>> at java.util.concurrent.<u></u>ThreadPoolExecutor.runWorker(<u></u>ThreadPoolExecutor.java:1142) [rt.jar:1.8.0_31]<br>
> >>>>> at java.util.concurrent.<u></u>ThreadPoolExecutor$Worker.run(<u></u>ThreadPoolExecutor.java:617) [rt.jar:1.8.0_31]<br>
> >>>>> at java.lang.Thread.run(Thread.<u></u>java:745) [rt.jar:1.8.0_31]<br>
> >>>>> Caused by: javax.net.ssl.<u></u>SSLPeerUnverifiedException: peer not authenticated<br>
> >>>>> at sun.security.ssl.<u></u>SSLSessionImpl.<u></u>getPeerCertificates(<u></u>SSLSessionImpl.java:431) [jsse.jar:1.8.0_31]<br>
> >>>>> at org.apache.http.conn.ssl.<u></u>AbstractVerifier.verify(<u></u>AbstractVerifier.java:128) [httpclient-4.2.1.jar:4.2.1]<br>
> >>>>> at org.apache.http.conn.ssl.<u></u>SSLSocketFactory.<u></u>connectSocket(<u></u>SSLSocketFactory.java:572) [httpclient-4.2.1.jar:4.2.1]<br>
> >>>>> at org.apache.http.impl.conn.<u></u>DefaultClientConnectionOperato<u></u>r.openConnection(<u></u>DefaultClientConnectionOperato<u></u>r.java:180) [httpclient-4.2.1.jar:4.2.1]<br>
> >>>>><br>
> >>>>><br>
> >>>>> So "peer not authenticated" seems pretty obvious for the reason it fails.<br>
> >>>>> The question is what do we need to do for this ? Anyone an idea ?<br>
> >>>>><br>
> >>>>> Thx,<br>
> >>>>> Sebi<br>
> >>>>><br>
> >>>>><br>
> >>>>> ______________________________<u></u>_________________<br>
> >>>>> aerogear-dev mailing list<br>
> >>>>> <a href="mailto:aerogear-dev@lists.jboss.org" target="_blank">aerogear-dev@lists.jboss.org</a><br>
> >>>>> <a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/aerogear-dev</a><br>
> >>>>><br>
> >>>><br>
> >>>><br>
> >>>><br>
> >>>> --<br>
> >>>> Matthias Wessendorf<br>
> >>>><br>
> >>>> blog: <a href="http://matthiaswessendorf.wordpress.com/" target="_blank">http://matthiaswessendorf.<u></u>wordpress.com/</a><br>
> >>>> sessions: <a href="http://www.slideshare.net/mwessendorf" target="_blank">http://www.slideshare.net/<u></u>mwessendorf</a><br>
> >>>> twitter: <a href="http://twitter.com/mwessendorf" target="_blank">http://twitter.com/mwessendorf</a><br>
> >>>><br>
> >>>> ______________________________<u></u>_________________<br>
> >>>> aerogear-dev mailing list<br>
> >>>> <a href="mailto:aerogear-dev@lists.jboss.org" target="_blank">aerogear-dev@lists.jboss.org</a><br>
> >>>> <a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/aerogear-dev</a><br>
> >>>><br>
> >>><br>
> >>><br>
> >>> ______________________________<u></u>_________________<br>
> >>> aerogear-dev mailing list<br>
> >>> <a href="mailto:aerogear-dev@lists.jboss.org" target="_blank">aerogear-dev@lists.jboss.org</a><br>
> >>> <a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/aerogear-dev</a><br>
> >>><br>
> >><br>
> >><br>
> >><br>
> >> --<br>
> >> Matthias Wessendorf<br>
> >><br>
> >> blog: <a href="http://matthiaswessendorf.wordpress.com/" target="_blank">http://matthiaswessendorf.<u></u>wordpress.com/</a><br>
> >> sessions: <a href="http://www.slideshare.net/mwessendorf" target="_blank">http://www.slideshare.net/<u></u>mwessendorf</a><br>
> >> twitter: <a href="http://twitter.com/mwessendorf" target="_blank">http://twitter.com/mwessendorf</a><br>
> >><br>
> >> ______________________________<u></u>_________________<br>
> >> aerogear-dev mailing list<br>
> >> <a href="mailto:aerogear-dev@lists.jboss.org" target="_blank">aerogear-dev@lists.jboss.org</a><br>
> >> <a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/aerogear-dev</a><br>
> >><br>
> ><br>
> ><br>
> ><br>
> > --<br>
> ><br>
> > --<br>
> > "The measure of a man is what he does with power" - Plato<br>
> > -<br>
> > @abstractj<br>
> > -<br>
> > Volenti Nihil Difficile<br>
> ><br>
> > ______________________________<u></u>_________________<br>
> > aerogear-dev mailing list<br>
> > <a href="mailto:aerogear-dev@lists.jboss.org" target="_blank">aerogear-dev@lists.jboss.org</a><br>
> > <a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/aerogear-dev</a><br>
> ><br>
<br>
> ______________________________<u></u>_________________<br>
> aerogear-dev mailing list<br>
> <a href="mailto:aerogear-dev@lists.jboss.org" target="_blank">aerogear-dev@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/aerogear-dev</a><br>
<br>
<br>
--<br>
<br>
abstractj<br>
PGP: 0x84DC9914<br>
______________________________<u></u>_________________<br>
aerogear-dev mailing list<br>
<a href="mailto:aerogear-dev@lists.jboss.org" target="_blank">aerogear-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/aerogear-dev</a><br>
</blockquote></div>