[keycloak-user] Get error when I set https to keycloak and tomcat server.

[Stian Thorgersen]

Looks like a bug in the authorization services when https is used. I assume
you're using the authorization services? Can you create a JIRA please.

On 13 October 2016 at 06:13, Joey <huazonglin at gmail.com> wrote:

> Hi Guys,
>
> I am trying to set SSL for both of keycloak and tomcat server. I apply
> a free cer from http://www.cacert.org. I installed cer to my keycloak
> server follow document  7.3 and 7.4
> https://keycloak.gitbooks.io/server-installation-and-
> configuration/content/v/2.2/topics/network/outgoing.html
>
> and installed cer to my tomcat server follow
> https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html
>
> I started keycloak server from https, it works fine. But I started
> tomcat with my application (It works fine with http, I changed
> everything from http to https in all configuation files)
> but I saw this error message in tomcat server log.
>
> Anyone can help me out of this problem, thank you.
>
> ERROR MESSAGE
>
>
> 2016-10-13 11:59:03.382 [localhost-startStop-1] DEBUG
> org.springframework.web.servlet.DispatcherServlet - Servlet 'spring'
> configured successfully
>
>
> Oct 13, 2016 11:59:03 AM org.apache.catalina.core.ContainerBase
> addChildInternal
>
> SEVERE: ContainerBase.addChild: start:
>
> org.apache.catalina.LifecycleException: Failed to start component
> [StandardEngine[Catalina].StandardHost[localhost].
> StandardContext[/ec-operation]]
>
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:162)
>
> at org.apache.catalina.core.ContainerBase.addChildInternal(
> ContainerBase.java:899)
>
> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:875)
>
> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:652)
>
> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1092)
>
> at org.apache.catalina.startup.HostConfig$DeployWar.run(
> HostConfig.java:1984)
>
> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
>
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
>
> at java.util.concurrent.ThreadPoolExecutor.runWorker(
> ThreadPoolExecutor.java:1142)
>
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(
> ThreadPoolExecutor.java:617)
>
> at java.lang.Thread.run(Thread.java:745)
>
> Caused by: java.lang.RuntimeException: Could not obtain configuration
> from server [https://sso.iishang-test.com:8443/auth/realms/iishang-b2c-
> sso-test/.well-known/uma-configuration].
>
> at org.keycloak.authorization.client.AuthzClient.<init>(
> AuthzClient.java:82)
>
> at org.keycloak.authorization.client.AuthzClient.create(
> AuthzClient.java:56)
>
> at org.keycloak.adapters.authorization.PolicyEnforcer.<
> init>(PolicyEnforcer.java:59)
>
> at org.keycloak.adapters.KeycloakDeploymentBuilder.internalBuild(
> KeycloakDeploymentBuilder.java:118)
>
> at org.keycloak.adapters.KeycloakDeploymentBuilder.build(
> KeycloakDeploymentBuilder.java:127)
>
> at org.keycloak.adapters.tomcat.AbstractKeycloakAuthenticatorV
> alve.keycloakInit(AbstractKeycloakAuthenticatorValve.java:133)
>
> at org.keycloak.adapters.tomcat.AbstractKeycloakAuthenticatorV
> alve.lifecycleEvent(AbstractKeycloakAuthenticatorValve.java:75)
>
> at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(
> LifecycleSupport.java:117)
>
> at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(
> LifecycleBase.java:90)
>
> at org.apache.catalina.util.LifecycleBase.setStateInternal(
> LifecycleBase.java:388)
>
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:155)
>
> ... 10 more
>
> Caused by: java.lang.NullPointerException
>
> at java.lang.String.<init>(String.java:566)
>
> at org.keycloak.authorization.client.util.HttpMethod.
> execute(HttpMethod.java:103)
>
> at org.keycloak.authorization.client.util.HttpMethodResponse$2.execute(
> HttpMethodResponse.java:48)
>
> at org.keycloak.authorization.client.AuthzClient.<init>(
> AuthzClient.java:80)
>
> ... 20 more
>
>
> Oct 13, 2016 11:59:03 AM org.apache.catalina.startup.HostConfig deployWAR
>
> SEVERE: Error deploying web application archive
> /root/ssotesting/apache-tomcat-7.0.72/webapps/ec-operation.war
>
> java.lang.IllegalStateException: ContainerBase.addChild: start:
> org.apache.catalina.LifecycleException: Failed to start component
> [StandardEngine[Catalina].StandardHost[localhost].
> StandardContext[/ec-operation]]
>
> at org.apache.catalina.core.ContainerBase.addChildInternal(
> ContainerBase.java:903)
>
> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:875)
>
> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:652)
>
> at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1092)
>
> at org.apache.catalina.startup.HostConfig$DeployWar.run(
> HostConfig.java:1984)
>
> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
>
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
>
> at java.util.concurrent.ThreadPoolExecutor.runWorker(
> ThreadPoolExecutor.java:1142)
>
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(
> ThreadPoolExecutor.java:617)
>
> at java.lang.Thread.run(Thread.java:745)
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>