BC FIPS with CLI: Could not connect to remote+https://127.0.0.1:9993.
The connection timed out
----------------------------------------------------------------------------------------------
Key: ELY-1624
URL:
https://issues.jboss.org/browse/ELY-1624
Project: WildFly Elytron
Issue Type: Bug
Components: SSL
Reporter: Martin Choma
Assignee: Farah Juma
Priority: Blocker
Attachments: eap_server.log, jboss-cli.log, keystore.bcfks, standalone.xml
I am trying to connect from jboss-cli.sh to EAP server. Server and client run with BC
FIPS.
{code:java|title=jboss-cli.log}
11:48:08,992 TRACE [org.jboss.remoting.remote] Attempting to connect to
"remote+https://127.0.0.1:9993" with options
{org.xnio.Options.SSL_STARTTLS=>false,org.xnio.Options.SSL_ENABLED=>true}
11:48:14,005 ERROR [org.jboss.as.cli.impl.CliLauncher] Error processing CLI:
org.jboss.as.cli.CliInitializationException: Failed to connect to the controller
at org.jboss.as.cli.impl.CliLauncher.initCommandContext(CliLauncher.java:330)
at org.jboss.as.cli.impl.CliLauncher.main(CliLauncher.java:304)
at org.jboss.as.cli.CommandLineMain.main(CommandLineMain.java:45)
at org.jboss.modules.Module.run(Module.java:352)
at org.jboss.modules.Module.run(Module.java:320)
at org.jboss.modules.Main.main(Main.java:593)
Caused by: org.jboss.as.cli.CommandLineException: The controller is not available at
127.0.0.1:9993
at
org.jboss.as.cli.impl.CommandContextImpl.tryConnection(CommandContextImpl.java:1447)
at
org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:1226)
at
org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:1203)
at
org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:1198)
at org.jboss.as.cli.impl.CliLauncher.initCommandContext(CliLauncher.java:328)
... 5 more
Caused by: java.io.IOException: java.net.ConnectException: WFLYPRT0023: Could not connect
to remote+https://127.0.0.1:9993. The connection timed out
at
org.jboss.as.controller.client.impl.AbstractModelControllerClient.executeForResult(AbstractModelControllerClient.java:149)
at
org.jboss.as.controller.client.impl.AbstractModelControllerClient.execute(AbstractModelControllerClient.java:75)
at
org.jboss.as.cli.impl.CommandContextImpl.tryConnection(CommandContextImpl.java:1394)
... 9 more
Caused by: java.net.ConnectException: WFLYPRT0023: Could not connect to
remote+https://127.0.0.1:9993. The connection timed out
at
org.jboss.as.protocol.ProtocolConnectionUtils.connectSync(ProtocolConnectionUtils.java:130)
at
org.jboss.as.protocol.ProtocolConnectionManager$EstablishingConnection.connect(ProtocolConnectionManager.java:259)
at
org.jboss.as.protocol.ProtocolConnectionManager.connect(ProtocolConnectionManager.java:70)
at
org.jboss.as.protocol.mgmt.ManagementClientChannelStrategy$Establishing.getChannel(ManagementClientChannelStrategy.java:167)
at
org.jboss.as.cli.impl.CLIModelControllerClient.getOrCreateChannel(CLIModelControllerClient.java:192)
at
org.jboss.as.cli.impl.CLIModelControllerClient$2.getChannel(CLIModelControllerClient.java:126)
at
org.jboss.as.protocol.mgmt.ManagementChannelHandler.executeRequest(ManagementChannelHandler.java:135)
at
org.jboss.as.protocol.mgmt.ManagementChannelHandler.executeRequest(ManagementChannelHandler.java:110)
at
org.jboss.as.controller.client.impl.AbstractModelControllerClient.executeRequest(AbstractModelControllerClient.java:263)
at
org.jboss.as.controller.client.impl.AbstractModelControllerClient.execute(AbstractModelControllerClient.java:168)
at
org.jboss.as.controller.client.impl.AbstractModelControllerClient.executeForResult(AbstractModelControllerClient.java:147)
{code}
It works when I use
- non-FIPS java for CLI and FIPS java for server when connecting to secured 9993 port
- FIPS java for CLI and non-FIPS java for server when connecting to unsecured port 9990
Here I get getting over ELY-1621 and ELY-1622
I would appreciate any hint for way of investigation.