Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-6483

wildfly-openssl does not work with OpenSSL 1.1.0

XMLWordPrintable

      Wildfly-openssl version used 1.0.0.Alpha1.

      When I try to use OpenSSL 1.1.0b with wildfly-openssl, I get error messages that 'SSLeay' symbol cannot be loaded. When I searched in OpenSSL changes, I found on this page (related to Changes between 1.0.2h and 1.1.0):

      *) All instances of the string "ssleay" in the public API were replaced
      with OpenSSL (case-matching; e.g., OPENSSL_VERSION for #define's)
      Some error codes related to internal RSA_eay API's were renamed.
      [Rich Salz]

      How to reproduce:

      1. start EAP with path to OpenSSL 1.1.0b: LD_LIBRARY_PATH="/tmp/openssl110/lib" ./bin/standalone.sh -Dorg.wildfly.openssl.path=/tmp/openssl110/lib/
      2. configure 'openssl.TLS' provider /core-service=management/security-realm=ApplicationRealm/server-identity=ssl:write-attribute(name=protocol,value=openssl.TLS)
      3. reload

      See errors in server.log:

      server.log
      ...
      16:30:21,310 INFO  [org.infinispan.configuration.cache.EvictionConfigurationBuilder] (ServerService Thread Pool -- 60) ISPN000152: Passivation configured without an eviction policy being selected. Only manually evicted entities will be passivated.
      16:30:21,315 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-8) MSC000001: Failed to start service jboss.server.controller.management.security_realm.ApplicationRealm.ssl-context: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.ApplicationRealm.ssl-context: WFLYDM0018: Unable to start service
      	at org.jboss.as.domain.management.security.SSLContextService.start(SSLContextService.java:108)
      	at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1963)
      	at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1896)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      	at java.lang.Thread.run(Thread.java:745)
      Caused by: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: openssl.TLS, provider: openssl, class: org.wildfly.openssl.OpenSSLContextSPI$OpenSSLTLSContextSpi)
      	at java.security.Provider$Service.newInstance(Provider.java:1617)
      	at sun.security.jca.GetInstance.getInstance(GetInstance.java:236)
      	at sun.security.jca.GetInstance.getInstance(GetInstance.java:164)
      	at javax.net.ssl.SSLContext.getInstance(SSLContext.java:156)
      	at org.jboss.as.domain.management.security.SSLContextService.start(SSLContextService.java:97)
      	... 5 more
      Caused by: java.lang.IllegalStateException: Could not load required symbol from libssl: SSLeay
      	at org.wildfly.openssl.SSLImpl.initialize0(Native Method)
      	at org.wildfly.openssl.SSLImpl.initialize(SSLImpl.java:33)
      	at org.wildfly.openssl.SSL.init(SSL.java:87)
      	at org.wildfly.openssl.SSL.getInstance(SSL.java:46)
      	at org.wildfly.openssl.OpenSSLContextSPI$OpenSSLTLSContextSpi.<init>(OpenSSLContextSPI.java:423)
      	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
      	at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
      	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
      	at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
      	at java.security.Provider$Service.newInstance(Provider.java:1595)
      	... 9 more
      
      16:30:21,320 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([("subsystem" => "ejb3")]) - failure description: {
          "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined,
          "WFLYCTL0288: One or more services were unable to start due to one or more indirect dependencies not being available." => {
              "Services that were unable to start:" => [
                  "jboss.ejb.default-local-ejb-receiver-service",
                  "jboss.ejb3.ejbClientContext.default",
                  "jboss.ejb3.localEjbReceiver.value"
              ],
              "Services that may be the cause:" => ["jboss.remoting.remotingConnectorInfoService.http-remoting-connector"]
          }
      }
      16:30:21,323 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([
          ("subsystem" => "ejb3"),
          ("service" => "remote")
      ]) - failure description: {
          "WFLYCTL0412: Required services that are not installed:" => ["jboss.remoting.remotingConnectorInfoService.http-remoting-connector"],
          "WFLYCTL0180: Services with missing/unavailable dependencies" => ["jboss.ejb3.connector is missing [jboss.remoting.remotingConnectorInfoService.http-remoting-connector]"]
      }
      16:30:21,326 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([
          ("subsystem" => "remoting"),
          ("http-connector" => "http-remoting-connector")
      ]) - failure description: {
          "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined,
          "WFLYCTL0288: One or more services were unable to start due to one or more indirect dependencies not being available." => {
              "Services that were unable to start:" => ["jboss.remoting.authentication_provider.http-remoting-connector"],
              "Services that may be the cause:" => ["jboss.remoting.remotingConnectorInfoService.http-remoting-connector"]
          }
      }
      16:30:21,327 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([("subsystem" => "webservices")]) - failure description: {
          "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined,
          "WFLYCTL0288: One or more services were unable to start due to one or more indirect dependencies not being available." => {
              "Services that were unable to start:" => ["jboss.ws.config"],
              "Services that may be the cause:" => ["jboss.remoting.remotingConnectorInfoService.http-remoting-connector"]
          }
      }
      16:30:21,329 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([
          ("subsystem" => "undertow"),
          ("server" => "default-server"),
          ("https-listener" => "https")
      ]) - failure description: {
          "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined,
          "WFLYCTL0288: One or more services were unable to start due to one or more indirect dependencies not being available." => {
              "Services that were unable to start:" => ["jboss.undertow.listener.https"],
              "Services that may be the cause:" => ["jboss.remoting.remotingConnectorInfoService.http-remoting-connector"]
          }
      }
      16:30:21,331 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([
          ("core-service" => "management"),
          ("security-realm" => "ApplicationRealm")
      ]) - failure description: {
          "WFLYCTL0080: Failed services" => {"jboss.server.controller.management.security_realm.ApplicationRealm.ssl-context" => "org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.ApplicationRealm.ssl-context: WFLYDM0018: Unable to start service
          Caused by: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: openssl.TLS, provider: openssl, class: org.wildfly.openssl.OpenSSLContextSPI$OpenSSLTLSContextSpi)
          Caused by: java.lang.IllegalStateException: Could not load required symbol from libssl: SSLeay"},
          "WFLYCTL0412: Required services that are not installed:" => ["jboss.server.controller.management.security_realm.ApplicationRealm.ssl-context"],
          "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined,
          "WFLYCTL0288: One or more services were unable to start due to one or more indirect dependencies not being available." => {
              "Services that were unable to start:" => ["jboss.server.controller.management.security_realm.ApplicationRealm"],
              "Services that may be the cause:" => ["jboss.remoting.remotingConnectorInfoService.http-remoting-connector"]
          }
      }
      16:30:21,345 INFO  [org.jboss.as.controller] (Controller Boot Thread) WFLYCTL0183: Service status report
      WFLYCTL0184:    New missing/unsatisfied dependencies:
            service jboss.remoting.remotingConnectorInfoService.http-remoting-connector (missing) dependents: [service jboss.ejb3.connector] 
      WFLYCTL0186:   Services which failed to start:      service jboss.server.controller.management.security_realm.ApplicationRealm.ssl-context: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.ApplicationRealm.ssl-context: WFLYDM0018: Unable to start service
      
      16:30:21,394 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
      16:30:21,394 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
      16:30:21,394 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: JBoss EAP 7.1.0.Alpha1 (WildFly Core 3.0.0.Alpha9-redhat-1) started (with errors) in 387ms - Started 327 of 579 services (9 services failed or missing dependencies, 393 services are lazy, passive or on-demand)
      

              sdouglas1@redhat.com Stuart Douglas (Inactive)
              jstourac@redhat.com Jan Stourac
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: