Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-4660

GATEWAY-HTTP profile should have a support for https endpoint.

XMLWordPrintable

    • Todo

      A) GATEWAY-HTTP currently doesnot support https based communication.

      B) Right now Gateway-MQ profile supports https. Gateway-MQ profile sends decrypted(plain http) data to Gateway-HTTP.

      C) Hence flow:

      request ---> gateway-mq(https-enabled) ---> gateway-http ---> https endpoint

      Configurations in org.ops4j.pax.web.properties: http disabled, only https enabled.
      Logs: Proxying request /cxf/rest/customerservice/customers to service path: /cxf/rest/customerservice/customers on service: https://10.214.21.5:8186/cxf/rest reverseServiceUrl: http://0.0.0.0:9000/cxf/rest
      Output: Fails with Error log below.

      09:24:35,937 | DEBUG | qtp170823327-337 | ssl                              | 93 - org.eclipse.jetty.aggregate.jetty-all-server - 8.1.17.v20150415 | [Session-1, SSL_NULL_WITH_NULL_NULL] SslConnection@6d98d519 SSL NOT_HANDSHAKING i/o/u=237/0/0 ishut=false oshut=false {AsyncHttpConnection@4cce9485,g=HttpGenerator{s=0,h=-1,b=-1,c=-1},p=HttpParser{s=-14,l=0,c=0},r=0} NOT_HANDSHAKING filled=237/237 flushed=0/0
09:24:35,938 | DEBUG | qtp170823327-337 | ssl                              | 93 - org.eclipse.jetty.aggregate.jetty-all-server - 8.1.17.v20150415 | SCEP@e4756e1{l(/10.214.21.5:59224)<->r(/10.214.21.5:8186),s=1,open=true,ishut=false,oshut=false,rb=false,wb=false,w=true,i=0r}-{SslConnection@6d98d519 SSL NEED_WRAP i/o/u=237/0/0 ishut=false oshut=false {AsyncHttpConnection@4cce9485,g=HttpGenerator{s=0,h=-1,b=-1,c=-1},p=HttpParser{s=-14,l=0,c=0},r=0}}
javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
	at sun.security.ssl.EngineInputRecord.bytesInCompletePacket(EngineInputRecord.java:171)[:1.7.0_55]
	at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:848)[:1.7.0_55]
	at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:761)[:1.7.0_55]
	at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)[:1.7.0_55]
	at org.eclipse.jetty.io.nio.SslConnection.unwrap(SslConnection.java:555)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.io.nio.SslConnection.process(SslConnection.java:359)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.io.nio.SslConnection.access$900(SslConnection.java:48)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.io.nio.SslConnection$SslEndPoint.fill(SslConnection.java:715)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.http.HttpParser.fill(HttpParser.java:1044)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:280)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.io.nio.SslConnection.handle(SslConnection.java:196)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:696)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:53)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]
	at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543)[93:org.eclipse.jetty.aggregate.jetty-all-server:8.1.17.v20150415]

      D) While flow:

      request ---> gateway-mq(https-enabled) ---> gateway-http ---> http endpoint

      Configurations in org.ops4j.pax.web.properties: http and https both are set.
      Logs: Proxying request /cxf/personService to service path: /cxf/personService/ on service: http://192.168.166.1:8182/cxf/personService reverseServiceUrl: http://0.0.0.0:9000/cxf/personService
      Output: Success but request is sent to http endpoint finally.

              Unassigned Unassigned
              rhn-support-cpandey Chandra Shekhar Pandey (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: