Martin-

Did you also upgrade from JDK 8?  Since JDK 9, the default keystore changed to 
PKCS12. You may need to create a new, updated keystore for your ssl 
key+certificate.

-Matt

On Jan 14, 2024, at 11:53 AM, Martin Lichtin <mlich...@gmail.com> wrote:


With Pax-Web 8 being part of Karaf 4.4.5, it fails at startup with

2024-01-14T18:28:39,157 | ERROR | 1-thread-1 (change controller) | Activator    
              | x.web.service.internal.Activator  623 | 412 - 
org.ops4j.pax.web.pax-web-runtime - 8.0.24 | Unable to start Pax Web server: 
Get Key failed: null
java.security.UnrecoverableKeyException: Get Key failed: null
        at 
sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:396) 
~[?:1.8.0_391]
        at 
sun.security.provider.KeyStoreDelegator.engineGetKey(KeyStoreDelegator.java:96) 
~[?:1.8.0_391]
        at 
sun.security.provider.JavaKeyStore$DualFormatJKS.engineGetKey(JavaKeyStore.java:71)
 ~[?:1.8.0_391]
        at java.security.KeyStore.getKey(KeyStore.java:1027) ~[?:1.8.0_391]
        at 
sun.security.ssl.SunX509KeyManagerImpl.<init>(SunX509KeyManagerImpl.java:145) 
~[?:1.8.0_391]
        at 
sun.security.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:70)
 ~[?:1.8.0_391]
        at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:256) 
~[?:1.8.0_391]
        at 
org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1249)
 ~[?:?]
        at 
org.eclipse.jetty.util.ssl.SslContextFactory$Server.getKeyManagers(SslContextFactory.java:2364)
 ~[?:?]
        at 
org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:373) 
~[?:?]
        at 
org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:244)
 ~[?:?]
        at 
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
 ~[?:?]
        at 
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
 ~[?:?]
        at 
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
 ~[?:?]
        at 
org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:97)
 ~[?:?]
        at 
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
 ~[?:?]
        at 
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
 ~[?:?]
        at 
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
 ~[?:?]
        at 
org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:323) 
~[?:?]
        at 
org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
 ~[?:?]
        at 
org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234) 
~[?:?]
        at 
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
 ~[?:?]
        at org.eclipse.jetty.server.Server.doStart(Server.java:401) ~[?:?]
        at 
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
 ~[?:?]
        at 
org.ops4j.pax.web.service.jetty.internal.JettyServerWrapper.start(JettyServerWrapper.java:626)
 ~[?:?]
        at 
org.ops4j.pax.web.service.jetty.internal.JettyServerController.start(JettyServerController.java:109)
 ~[?:?]
        at 
org.ops4j.pax.web.service.internal.Activator.performConfiguration(Activator.java:555)
 ~[?:?]
        at 
org.ops4j.pax.web.service.internal.Activator.updateController(Activator.java:445)
 ~[?:?]
        at 
org.ops4j.pax.web.service.internal.Activator.lambda$updateServerControllerFactory$1(Activator.java:347)
 ~[?:?]
        at 
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) 
[?:1.8.0_391]
        at java.util.concurrent.FutureTask.run(FutureTask.java:266) 
[?:1.8.0_391]
        at 
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
 [?:1.8.0_391]
        at 
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
 [?:1.8.0_391]
        at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) 
[?:1.8.0_391]
        at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) 
[?:1.8.0_391]
        at java.lang.Thread.run(Thread.java:750) [?:1.8.0_391]
Caused by: java.lang.NullPointerException
        at 
sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:332) 
~[?:1.8.0_391]
        ... 35 more

does anyone know what has changed?

--
--
------------------
OPS4J - http://www.ops4j.org - ops4j@googlegroups.com

---
You received this message because you are subscribed to the Google Groups 
"OPS4J" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
ops4j+unsubscr...@googlegroups.com<mailto:ops4j+unsubscr...@googlegroups.com>.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ops4j/33078b63-1247-4b23-bc1f-cda485a31422n%40googlegroups.com<https://groups.google.com/d/msgid/ops4j/33078b63-1247-4b23-bc1f-cda485a31422n%40googlegroups.com?utm_medium=email&utm_source=footer>.

-- 
-- 
------------------
OPS4J - http://www.ops4j.org - ops4j@googlegroups.com

--- 
You received this message because you are subscribed to the Google Groups 
"OPS4J" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ops4j+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ops4j/53374D51-EC7B-4D85-B93A-1A04F5CC78D9%40hyte.io.

Reply via email to