Jens Deppe created GEODE-5230:
---------------------------------
Summary: Pulse does not work when SSL is enabled for JMX
Key: GEODE-5230
URL: https://issues.apache.org/jira/browse/GEODE-5230
Project: Geode
Issue Type: Bug
Components: pulse
Reporter: Jens Deppe
If I start a locator with SSL enabled {{ssl-components=ALL}} then Pulse does
not work. When logging in I see an error message like:
{noformat}
Connecting ...
Failed to retrieve RMIServer stub: javax.naming.CommunicationException [Root
exception is java.rmi.ConnectIOException: error during JRMP connection
establishment; nested exception is: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target]
{noformat}
pulse.log shows the same:
{noformat}
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
~[?:1.8.0_161]
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
~[?:1.8.0_161]
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
~[?:1.8.0_161]
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392)
~[?:1.8.0_161]
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)
~[?:1.8.0_161]
at sun.security.validator.Validator.validate(Validator.java:260)
~[?:1.8.0_161]
at
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
~[?:1.8.0_161]
at
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
~[?:1.8.0_161]
at
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
~[?:1.8.0_161]
at
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1596)
~[?:1.8.0_161]
at
sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
~[?:1.8.0_161]
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1052)
~[?:1.8.0_161]
at sun.security.ssl.Handshaker.process_record(Handshaker.java:987)
~[?:1.8.0_161]
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
~[?:1.8.0_161]
at
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
~[?:1.8.0_161]
at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:757)
~[?:1.8.0_161]
at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:123)
~[?:1.8.0_161]
at
java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
~[?:1.8.0_161]
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
~[?:1.8.0_161]
at java.io.DataOutputStream.flush(DataOutputStream.java:123)
~[?:1.8.0_161]
at
sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:229)
~[?:1.8.0_161]
at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:202)
~[?:1.8.0_161]
at sun.rmi.server.UnicastRef.newCall(UnicastRef.java:338) ~[?:1.8.0_161]
at
sun.rmi.registry.RegistryImpl_Stub.lookup(RegistryImpl_Stub.java:112)
~[?:1.8.0_161]
at
com.sun.jndi.rmi.registry.RegistryContext.lookup(RegistryContext.java:132)
~[?:1.8.0_161]
at
com.sun.jndi.toolkit.url.GenericURLContext.lookup(GenericURLContext.java:205)
~[?:1.8.0_161]
at javax.naming.InitialContext.lookup(InitialContext.java:417)
~[?:1.8.0_161]
at
javax.management.remote.rmi.RMIConnector.findRMIServerJNDI(RMIConnector.java:1955)
~[?:1.8.0_161]
at
javax.management.remote.rmi.RMIConnector.findRMIServer(RMIConnector.java:1922)
~[?:1.8.0_161]
at
javax.management.remote.rmi.RMIConnector.connect(RMIConnector.java:287)
~[?:1.8.0_161]
... 92 more
{noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
