Uploaded image for project: 'Application Server 3  4  5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-7163

Configuring IIOP over SSL causes IOException on startup

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: JBossAS-5.1.0.GA
    • Fix Version/s: 6.0.0.M2
    • Component/s: IIOP service, Security
    • Labels:
      None
    • Environment:

      Windows XP repeatable with jdk 1.6.0_15 and jdk 1.5.0_20

      Description

      Perform the following steps:

      1. Edit server/all/conf/jacorb.properties - set jacorb.security.support_ssl=on
      2. Edit server/all/deploy/iiop-service.xml - uncomment the JaasSecurityDomain mbean and fill in valid key details then uncomment the SecurityDomain attribute and depends element of the CorbaORBService mbean.

      Start up with JBOSS 5.1.0-GA:

      13:31:56,207 WARN [CorbaORBService] Security domain java:/jaas/IIOP+SSL not found
      13:31:56,442 INFO [SSLServerSocketFactory] Creating
      13:31:56,442 WARN [SSLServerSocketFactory] Could not create DomainServerSocketFactory: java.io.IOEx
      ception: The securityDomain may not be null
      13:31:56,442 ERROR [AbstractKernelController] Error installing to Start: name=jboss:service=CorbaORB
      state=Create mode=Manual requiredState=Installed
      org.omg.CORBA.INITIALIZE: there was an invocation failure with the socket factory org.jboss.iiop.jac
      orb.SSLServerSocketFactory: java.io.IOException: The securityDomain may not be
      null vmcid: 0x0 minor code: 0 completed: No
      at org.jacorb.orb.factory.SocketFactoryManager.newFactory(Unknown Source)

      The above works successfully on JBOSS 4.2.3-GA

        Gliffy Diagrams

          Activity

          Hide
          sguilhen Stefan Guilhen added a comment -

          The error was caused by a missing dependency in CorbaORBService:

          <!-- uncomment to use IIOP over SSL
          <attribute name="SecurityDomain">java:/jaas/IIOP+SSL</attribute>
          <depends>JBossSecurityJNDIContextEstablishment</depends>
          <depends>jboss.security:service=JaasSecurityDomain,domain=IIOP+SSL</depends>
          -->

          I've added the JBossSecurityJNDIContextEstablishment dependency so now the CorbaORBService will wait until the security domain is available in the JNDI before attempting to create the SSLSocket factories.

          Change has been committed on Branch_5_X and Trunk.

          Show
          sguilhen Stefan Guilhen added a comment - The error was caused by a missing dependency in CorbaORBService: <!-- uncomment to use IIOP over SSL <attribute name="SecurityDomain">java:/jaas/IIOP+SSL</attribute> <depends>JBossSecurityJNDIContextEstablishment</depends> <depends>jboss.security:service=JaasSecurityDomain,domain=IIOP+SSL</depends> --> I've added the JBossSecurityJNDIContextEstablishment dependency so now the CorbaORBService will wait until the security domain is available in the JNDI before attempting to create the SSLSocket factories. Change has been committed on Branch_5_X and Trunk.
          Hide
          sguilhen Stefan Guilhen added a comment -

          Reopening to rectify the fix version.

          Show
          sguilhen Stefan Guilhen added a comment - Reopening to rectify the fix version.

            People

            • Assignee:
              sguilhen Stefan Guilhen
              Reporter:
              dmac Dan Machera
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development