[
https://issues.apache.org/jira/browse/CXF-6714?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh closed CXF-6714.
------------------------------------
> java.lang.StackOverflowError in AliasedX509ExtendedKeyManager
> -------------------------------------------------------------
>
> Key: CXF-6714
> URL: https://issues.apache.org/jira/browse/CXF-6714
> Project: CXF
> Issue Type: Bug
> Components: JAX-WS Runtime
> Affects Versions: 2.7.11
> Environment: Linux 2.6.24.4 (Linux From Scratch)
> java version "1.6.0_07"
> tomcat 6.0.16
> Reporter: Ludovic Garcia
>
> We request HTTPS Webservices secured with SSL Double Authentication using
> cxf-rt-frontend-jaxws / cxf-rt-transports-http / cxf-rt-ws-security.
> Without any warning, one of our service (the webservice client) went down
> with only the following stack trace :
> {code}
> 11:21:22 ERROR o.apache.juli.logging.DirectJDKLog | | | |
> "Servlet.service()" pour la servlet jsp a généré une exception
> java.lang.StackOverflowError: null
> at
> com.sun.net.ssl.internal.ssl.SunX509KeyManagerImpl.getCertificateChain(SunX509KeyManagerImpl.java:150)
> ~[na:1.6]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> at
> org.apache.cxf.transport.https.AliasedX509ExtendedKeyManager.getCertificateChain(AliasedX509ExtendedKeyManager.java:92)
> ~[cxf-rt-transports-http-2.7.11.jar:2.7.11]
> {code}
> And so on.
> I looked in the given class :
> {code:java}
> public X509Certificate[] getCertificateChain(String alias) {
> return keyManager.getCertificateChain(alias);
> }
> {code}
> At server-side, the issue is as if they never received the Client Certificate.
> Can you have a look please?
> Kind regards,
> Ludovic
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
