Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-29529

(8.0.5.1) jboss-server-migration.sh failed when host-master.xml has TLS settings for management interface with legacy security

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • Migration
    • None
    • False
    • Hide

      None

      Show
      None
    • False

      Environment:

      • jboss-eap-8.0.5-server-migration.zip
      • Migration from JBoss EAP 7.4.20 domain-mode to JBoss EAP 8.0.0.

      Help request:
      If the host-master.xml file in JBoss EAP 7.4.20 contains the following TLS settings for the management interface, jboss-server-migration.sh failed with an error. Is it a known restriction that the legacy security keystore settings cannot be converted to Elytron keystore settings? Or should we file a new JBEAP issue for this error?

      $ diff -u host-master.xml.original host-master.xml
      --- host-master.xml.original    2025-03-03 19:29:06.540685805 +0900
      +++ host-master.xml    2025-03-03 19:28:44.497149719 +0900
      @@ -9,6 +9,11 @@
           <management>
               <security-realms>
                   <security-realm name="ManagementRealm">
      +                <server-identities>
      +                    <ssl>
      +                        <keystore path="keystore.jks" relative-to="jboss.domain.config.dir" keystore-password="password1" alias="appserver"/>
      +                    </ssl>
      +                </server-identities>
                       <authentication>
                           <local default-user="$local" skip-group-loading="true"/>
                           <properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir"/>
      @@ -54,7 +59,7 @@
               <management-interfaces>
                   <http-interface security-realm="ManagementRealm">
                       <http-upgrade enabled="true"/>
      -                <socket interface="management" port="${jboss.management.http.port:9990}"/>
      +                <socket interface="management" secure-port="9993"/>
                   </http-interface>
               </management-interfaces>
           </management>
      

      migration.log

      2025-03-03 19:27:59,122 INFO  [as] WFLYSRV0049: JBoss EAP 8.0.0.GA (WildFly Core 21.0.5.Final-redhat-00001) starting
      2025-03-03 19:27:59,142 ERROR [management-operation] WFLYCTL0013: Operation ("add") failed - address: ([
          ("host" => "master"),
          ("core-service" => "management"),
          ("management-interface" => "http-interface")
      ...
      2025-03-03 19:27:59,142 FATAL [controller] WFLYHC0034: Host Controller boot has failed in an unrecoverable manner; exiting. See previous messages for details. - Host Controller configuration files in use: domain.xml, host-master.xml
      2025-03-03 19:27:59,144 INFO  [as] WFLYSRV0050: JBoss EAP 8.0.0.GA (WildFly Core 21.0.5.Final-redhat-00001) stopped in 0ms
      2025-03-03 19:27:59,146 ERROR [logger] Migration failed: org.jboss.migration.core.ServerMigrationFailureException: java.lang.IllegalStateException: WFLYEMB0022: Cannot invoke 'start' on embedded process
              at org.jboss.migration.core.task.TaskExecutionImpl.run(TaskExecutionImpl.java:174)
              at org.jboss.migration.core.task.TaskExecutionImpl.execute(TaskExecutionImpl.java:159)
              at org.jboss.migration.core.task.TaskContextImpl.execute(TaskContextImpl.java:68)
              at org.jboss.migration.core.task.TaskContextImpl.execute(TaskContextImpl.java:32)
      

              emartins@redhat.com Eduardo Martins
              emartins@redhat.com Eduardo Martins
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: