mjr, The tl;dr is that you need to upgrade nss on your system. Running `yum update nss` should take care of the problem.
The most recent java updates on centos 7 were built against a newer version of nss, but the Requires on the packages were not updated to account for this, and so some java calls have started failing. There is a bugzilla ticket open here https://bugzilla.redhat.com/show_bug.cgi?id=1332456 that is tracking the issue. It looks like they (Redhat/CentOS) are rebuilding java to update the Requires to take into account the new nss version, but I only see rebuilds for Fedora 23/24 in that ticket. We have a ticket tracking this internally here: https://tickets.puppetlabs.com/browse/SERVER-1456, it has some more details as well as a few more upstream distro tickets to watch. Hope that helps, Matthaus On Mon, Aug 1, 2016 at 9:36 AM, Mark <[email protected]> wrote: > Hello, > > I'm trying to transition from Centos 6 to Centos 7 for my puppet master. I > have some custom modules that set up puppetmaster and puppetdb. Puppetdb > seems to be having issues and I'm not sure why. I'm running puppetdb using > postgresql. I've created the user and can confirm that the user hass access > to the database however nothing is being initialized in postgres. So if I > connect to the puppetdb database nothing is there. > > I've run puppetdb in the forground and got the following error (this is > puppetdb 2.3.0 using Java 1.7 on Centos 7) > > # puppetdb foreground --debug > Exception in thread "main" java.lang.InternalError, > compiling:(digest.clj:85:30) > at clojure.lang.Compiler.load(Compiler.java:7142) > at clojure.lang.RT.loadResourceScript(RT.java:370) > at clojure.lang.RT.loadResourceScript(RT.java:361) > at clojure.lang.RT.load(RT.java:440) > at clojure.lang.RT.load(RT.java:411) > at clojure.core$load$fn__5066.invoke(core.clj:5641) > at clojure.core$load.doInvoke(core.clj:5640) > at clojure.lang.RestFn.invoke(RestFn.java:408) > at clojure.core$load_one.invoke(core.clj:5446) > at clojure.core$load_lib$fn__5015.invoke(core.clj:5486) > at clojure.core$load_lib.doInvoke(core.clj:5485) > at clojure.lang.RestFn.applyTo(RestFn.java:142) > at clojure.core$apply.invoke(core.clj:626) > at clojure.core$load_libs.doInvoke(core.clj:5524) > at clojure.lang.RestFn.applyTo(RestFn.java:137) > at clojure.core$apply.invoke(core.clj:626) > at clojure.core$require.doInvoke(core.clj:5607) > at clojure.lang.RestFn.invoke(RestFn.java:551) > at > puppetlabs.kitchensink.core$eval9$loading__4958__auto____10.invoke(core.clj:7) > at puppetlabs.kitchensink.core$eval9.invoke(core.clj:7) > at clojure.lang.Compiler.eval(Compiler.java:6703) > at clojure.lang.Compiler.eval(Compiler.java:6692) > at clojure.lang.Compiler.load(Compiler.java:7130) > at clojure.lang.RT.loadResourceScript(RT.java:370) > at clojure.lang.RT.loadResourceScript(RT.java:361) > at clojure.lang.RT.load(RT.java:440) > at clojure.lang.RT.load(RT.java:411) > at clojure.core$load$fn__5066.invoke(core.clj:5641) > at clojure.core$load.doInvoke(core.clj:5640) > at clojure.lang.RestFn.invoke(RestFn.java:408) > at clojure.core$load_one.invoke(core.clj:5446) > at clojure.core$load_lib$fn__5015.invoke(core.clj:5486) > at clojure.core$load_lib.doInvoke(core.clj:5485) > at clojure.lang.RestFn.applyTo(RestFn.java:142) > at clojure.core$apply.invoke(core.clj:626) > at clojure.core$load_libs.doInvoke(core.clj:5524) > at clojure.lang.RestFn.applyTo(RestFn.java:137) > at clojure.core$apply.invoke(core.clj:626) > at clojure.core$require.doInvoke(core.clj:5607) > at clojure.lang.RestFn.invoke(RestFn.java:482) > at > com.puppetlabs.puppetdb.core$eval3$loading__4958__auto____4.invoke(core.clj:14) > at com.puppetlabs.puppetdb.core$eval3.invoke(core.clj:14) > at clojure.lang.Compiler.eval(Compiler.java:6703) > at clojure.lang.Compiler.eval(Compiler.java:6692) > at clojure.lang.Compiler.load(Compiler.java:7130) > at clojure.lang.RT.loadResourceScript(RT.java:370) > at clojure.lang.RT.loadResourceScript(RT.java:361) > at clojure.lang.RT.load(RT.java:440) > at clojure.lang.RT.load(RT.java:411) > at clojure.core$load$fn__5066.invoke(core.clj:5641) > at clojure.core$load.doInvoke(core.clj:5640) > at clojure.lang.RestFn.invoke(RestFn.java:408) > at clojure.core$load_one.invoke(core.clj:5446) > at clojure.core$load_lib$fn__5015.invoke(core.clj:5486) > at clojure.core$load_lib.doInvoke(core.clj:5485) > at clojure.lang.RestFn.applyTo(RestFn.java:142) > at clojure.core$apply.invoke(core.clj:626) > at clojure.core$load_libs.doInvoke(core.clj:5524) > at clojure.lang.RestFn.applyTo(RestFn.java:137) > at clojure.core$apply.invoke(core.clj:626) > at clojure.core$require.doInvoke(core.clj:5607) > at clojure.lang.RestFn.invoke(RestFn.java:408) > at clojure.main$main_opt.invoke(main.clj:315) > at clojure.main$main.doInvoke(main.clj:420) > at clojure.lang.RestFn.invoke(RestFn.java:512) > at clojure.lang.Var.invoke(Var.java:409) > at clojure.lang.AFn.applyToHelper(AFn.java:178) > at clojure.lang.Var.applyTo(Var.java:700) > at clojure.main.main(main.java:37) > Caused by: java.lang.InternalError > at sun.security.ec.SunEC.initialize(Native Method) > at sun.security.ec.SunEC.access$000(SunEC.java:49) > at sun.security.ec.SunEC$1.run(SunEC.java:61) > at sun.security.ec.SunEC$1.run(SunEC.java:58) > at java.security.AccessController.doPrivileged(Native Method) > at sun.security.ec.SunEC.<clinit>(SunEC.java:58) > at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native > Method) > at > sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) > at > sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) > at java.lang.reflect.Constructor.newInstance(Constructor.java:526) > at java.lang.Class.newInstance(Class.java:383) > at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:221) > at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:206) > at java.security.AccessController.doPrivileged(Native Method) > at > sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:206) > at > sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:187) > at sun.security.jca.ProviderList.loadAll(ProviderList.java:282) > at > sun.security.jca.ProviderList.removeInvalid(ProviderList.java:299) > at > sun.security.jca.Providers.getFullProviderList(Providers.java:173) > at java.security.Security.getProviders(Security.java:456) > at digest$algorithms.invoke(digest.clj:76) > at digest$create_fns.invoke(digest.clj:85) > at digest$eval584.invoke(digest.clj:88) > at clojure.lang.Compiler.eval(Compiler.java:6703) > at clojure.lang.Compiler.load(Compiler.java:7130) > ... 68 more > > This doesn't give me much of anything to go on, but I'm hoping that there > is some clue that will give me somewhere to look or fix. All of this works > on Centos 6, so I feel like there must be something I'm missing on Centos 7 > that is causing the pain. > > Thanks, > mjr > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/puppet-users/4b59e35d-e205-4470-8293-cf5574d68685%40googlegroups.com > <https://groups.google.com/d/msgid/puppet-users/4b59e35d-e205-4470-8293-cf5574d68685%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CACD%3DwAcpE1A_qbmmRyYuoz%3D9oB7Bck5cKADQw5SxOJKcsJrU0g%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
