Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-2222

SecurityExceptions when starting server with signed jars in an exploded app deployment

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • 8.0.0.CR1
    • None
    • Class Loading
    • None
    • Hide

      Currently, the workarounds are to unsign the jars, not use an exploded deployment, or restart the server (as the problem is not consistent).

      Show
      Currently, the workarounds are to unsign the jars, not use an exploded deployment, or restart the server (as the problem is not consistent).

      This issue is directly related to https://issues.jboss.org/browse/AS7-2724, where signed jars are sometimes throwing a security exception when the server starts up and then classes cannot be loaded out of certain packages (appears to be some sort of a concurrency issue).

      The fix for that issue was applied to JarFileResourceLoader here: https://github.com/jboss-modules/jboss-modules/commit/8cf33f5c02c0c4bf6f96d04efa8845762bbc90ae

      However, our application is exploded, so the VFSResourceLoader needs a similar fix. I will attach a git patch file with the change we're proposing.

      To test the theory, we applied the patch to one server and left another as is as a control...we then left a process running that continually restarted the server for 3 days. The control server hit the SecurityException problem 5 times, and the patched server didn't show it at all.

              dlloyd@redhat.com David Lloyd
              fluetm Matt Fluet (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: