[jboss-jira] [JBoss JIRA] (AS7-4942) modcluster configuration does not respect SSL configuration

Brian Stansberry (JIRA) jira-events at lists.jboss.org
Sun Oct 21 10:37:01 EDT 2012


     [ https://issues.jboss.org/browse/AS7-4942?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Stansberry updated AS7-4942:
----------------------------------

    Fix Version/s: 7.2.0.CR1

    
> modcluster configuration does not respect SSL configuration
> -----------------------------------------------------------
>
>                 Key: AS7-4942
>                 URL: https://issues.jboss.org/browse/AS7-4942
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Clustering, Domain Management, Web
>    Affects Versions: 7.1.1.Final
>         Environment: jboss AS 7.1.1.Final. HA-Standalone configuration (clustered) with HTTPD modcluster advertise is on
>            Reporter: yuval konrad
>            Assignee: Tomaz Cerar
>              Labels: mod_cluster
>             Fix For: 7.2.0.CR1
>
>
> jboss AS 7.1.1.Final. HA-Standalone configuration (clustered) with HTTPD modcluster advertise is on; SSL configuration inside standalone xml are ignored (server is using default values).
> Setting the following inside httpd.conf file:
> <IfModule manager_module>
>   Listen *:6666
>   # ManagerBalancerName myCluster 
>   <VirtualHost *:6666>
>     <Location />
>      Order deny,allow
>      Deny from all
>      Allow from all 
>     </Location>
>      
>     SSLEngine ON
>     SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
>     SSLCertificateKeyFile conf/cert.key
>     SSLCertificateFile conf/cert.cert
>     SSLProtocol all -SSLv2
> ..
> Setting the following in jboss AS:
>            <subsystem xmlns="urn:jboss:domain:modcluster:1.0">
>                 <mod-cluster-config balancer="pnw-cluster" advertise-socket="modcluster" advertise-security-key="blabla">
>                         <dynamic-load-provider history="10" decay="50">
>                             <load-metric type="cpu" weight="2" capacity="2"/>
>                             <load-metric type="sessions" weight="1" capacity="1000"/>
>                             <load-metric type="heap" weight="3" capacity="1"/>
>                         </dynamic-load-provider>
>                         <ssl password="17227491" certificate-key-file="configuration/.keystore" ca-certificate-file="configuration/.keystore"/>
>                 </mod-cluster-config>
>            </subsystem>
> Keep getting the following ERRORS on jboss output:
> 17:51:44,291 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.mcmp.impl.JSSESocketFactory.<init>(JSSESocketFactory.java:113)
> 17:51:44,291 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.mcmp.impl.DefaultMCMPHandler$Proxy.<init>(DefaultMCMPHandler.java:747)
> 17:51:44,292 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.mcmp.impl.DefaultMCMPHandler.add(DefaultMCMPHandler.java:183)
> 17:51:44,293 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.mcmp.impl.DefaultMCMPHandler.addProxy(DefaultMCMPHandler.java:179)
> 17:51:44,293 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.advertise.impl.AdvertiseListenerImpl$AdvertiseListenerWorker.run(AdvertiseListenerImpl.java:443)
> 17:51:44,294 ERROR [stderr] (pool-27-thread-1)  at java.lang.Thread.run(Thread.java:662)
> 17:51:44,294 ERROR [stderr] (pool-27-thread-1) Caused by: java.io.FileNotFoundException: /export/home/ana50/.keystore (No such file or directory)
> 17:51:44,295 ERROR [stderr] (pool-27-thread-1)  at java.io.FileInputStream.open(Native Method)
> 17:51:44,295 ERROR [stderr] (pool-27-thread-1)  at java.io.FileInputStream.<init>(FileInputStream.java:120)
> 17:51:44,295 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.mcmp.impl.JSSESocketFactory.getStore(JSSESocketFactory.java:253)
> 17:51:44,296 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.mcmp.impl.JSSESocketFactory.getKeystore(JSSESocketFactory.java:208)
> 17:51:44,296 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.mcmp.impl.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:280)
> 17:51:44,297 ERROR [stderr] (pool-27-thread-1)  at org.jboss.modcluster.mcmp.impl.JSSESocketFactory.<init>(JSSESocketFactory.java:98)
> 17:51:44,297 ERROR [stderr] (pool-27-thread-1)  ... 5 more
> I went over all modcluster open and closed bugs without finding any relevant solution. I'm getting these error when using absolute paths as well.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list