Uploaded image for project: 'Quarkus'
  1. Quarkus
  2. QUARKUS-4612

Infinispan client extension doesn’t work on FIPS and Native Mandrel 23.0 and 23.1

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • 3.8.5.GA, 3.8.5.CR1, 3.8.5.CR2
    • team/eng
    • Hide

      Reproducer:

      • Use RHEL8 machine with FIPS enabled
      • git clone -b 3.8 git@github.com:quarkus-qe/quarkus-test-suite.git
      • cd quarkus-test-suite/nosql-db/infinispan
      • mvn clean verify -Dit.test=InfinispanIT -Dnative -Dquarkus.native.builder-image=registry-proxy.engineering.redhat.com/rh-osbs/quarkus-mandrel-for-jdk-21-rhel8:23.1 
      Show
      Reproducer: Use RHEL8 machine with FIPS enabled git clone -b 3.8 git@github.com:quarkus-qe/quarkus-test-suite.git cd quarkus-test-suite/nosql-db/infinispan mvn clean verify -Dit.test=InfinispanIT -Dnative -Dquarkus.native.builder-image=registry-proxy.engineering.redhat.com/rh-osbs/quarkus-mandrel-for-jdk-21-rhel8:23.1 
    • ---

      During verification of  QUARKUS-2036 we found out that app with Quarkus Infinispan client extension on cannot start on FIPS enabled system and with Native mode when using the native builder container for RHBQ 3.8 from registry.redhat.io/quarkus/mandrel-for-jdk-21-rhel8:

      SaslClientFactory implementation is missing as can be seen in stack trace:

      08:48:12,488 INFO  [service] 08:48:09,547 ISPN004001: Could not find 'hotrod-client.properties' file in classpath, using defaults.
08:48:12,489 INFO  [service] 08:48:09,550 ISPN004021: Infinispan version: Infinispan 'Flying Saucer' 14.0.19.Final
08:48:12,489 INFO  [service] 08:48:09,550 Create or get cache named mycache with the default configuration
08:48:12,489 INFO  [service] 08:48:09,554 Failed to initialize a channel. Closing: [id: 0x58cc7213]: java.lang.IllegalStateException: SaslClientFactory implementation not found
08:48:12,489 INFO  [service]     at org.infinispan.client.hotrod.impl.transport.netty.ChannelInitializer.getSaslClientFactory(ChannelInitializer.java:246)
08:48:12,489 INFO  [service]     at org.infinispan.client.hotrod.impl.transport.netty.ChannelInitializer.initAuthentication(ChannelInitializer.java:205)
08:48:12,489 INFO  [service]     at org.infinispan.client.hotrod.impl.transport.netty.ChannelInitializer.initChannel(ChannelInitializer.java:110)
08:48:12,490 INFO  [service]     at io.netty.channel.ChannelInitializer.initChannel(ChannelInitializer.java:129)
08:48:12,490 INFO  [service]     at io.netty.channel.ChannelInitializer.handlerAdded(ChannelInitializer.java:112)

       

      Example run: https://main-jenkins-csb-quarkusqe.apps.ocp-c1.prod.psi.redhat.com/view/rhbq-3.8-extended-platform/job/rhbq-3.8-baremetal-ts-native/8/jdk=openjdk-17,label=RHEL8_FIPS%20&&%20xlarge%20&&%20docker,scenario=databases-modules/testReport/junit/io.quarkus.ts.infinispan/InfinispanIT/___/

       

      Tested with 3.8.5 and 999-SNAPSHOT:

      Works for: quay.io/quarkus/ubi-quarkus-mandrel-builder-image:jdk-21 

      Fails with: 

            karestig@redhat.com Katia Aresti
            rh-ee-gtroitsk Georgii Troitskii
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: