Step 1 of 4: Choose Issues

Cancel

Key Summary Description
WFLY-10952

WFLY-10812 JDK11 IIOPSslInvocationTestCase fails

cd testsuite/integration/iiop
JAVA_HOME=/opt/jdk-11/ PATH=$JAVA_HOME/bin:$PATH mvn clean test -Dtest=IIOPSslInvocationTestCase#testManualCleartextLookup -Djavax.net.debug=all
Caused by: javax.naming.NamingException: WFLYNAM0062: Failed to lookup env/statelessHome [Root exception is java.lang.RuntimeException: javax.naming.NamingException: WFLYIIOP0031: Cannot connect to ORB [Root exception is org.omg.CORBA.COMM_FAILURE:   vmcid: SUN  minor code: 201  completed: No]]
	at org.jboss.as.naming@14.0.0.CR1-SNAPSHOT//org.jboss.as.naming.ServiceBasedNamingStore.lookup(ServiceBasedNamingStore.java:159)
	at org.jboss.as.naming@14.0.0.CR1-SNAPSHOT//org.jboss.as.naming.ServiceBasedNamingStore.lookup(ServiceBasedNamingStore.java:83)
	at org.jboss.as.naming@14.0.0.CR1-SNAPSHOT//org.jboss.as.naming.NamingContext.lookup(NamingContext.java:207)
	at org.jboss.as.naming@14.0.0.CR1-SNAPSHOT//org.jboss.as.naming.NamingContext.lookup(NamingContext.java:193)
	at org.jboss.as.naming@14.0.0.CR1-SNAPSHOT//org.jboss.as.naming.NamingContext.lookup(NamingContext.java:189)
	at org.jboss.as.naming@14.0.0.CR1-SNAPSHOT//org.jboss.as.naming.deployment.ContextNames$BindInfo$1$1.getReference(ContextNames.java:322)
	... 213 more
Caused by: java.lang.RuntimeException: javax.naming.NamingException: WFLYIIOP0031: Cannot connect to ORB [Root exception is org.omg.CORBA.COMM_FAILURE:   vmcid: SUN  minor code: 201  completed: No]
	at org.jboss.as.ejb3@14.0.0.CR1-SNAPSHOT//org.jboss.as.ejb3.deployment.processors.EjbLookupInjectionSource$1.getReference(EjbLookupInjectionSource.java:99)
	at org.jboss.as.naming@14.0.0.CR1-SNAPSHOT//org.jboss.as.naming.ServiceBasedNamingStore.lookup(ServiceBasedNamingStore.java:143)
	... 218 more
Caused by: javax.naming.NamingException: WFLYIIOP0031: Cannot connect to ORB [Root exception is org.omg.CORBA.COMM_FAILURE:   vmcid: SUN  minor code: 201  completed: No]
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.naming.jndi.CNCtx.setOrbAndRootContext(CNCtx.java:366)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.naming.jndi.CNCtx.initUsingCorbanameUrl(CNCtx.java:335)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.naming.jndi.CNCtx.initUsingUrl(CNCtx.java:268)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.naming.jndi.CNCtx.initOrbAndRootContext(CNCtx.java:233)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.naming.jndi.CNCtx.<init>(CNCtx.java:99)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.naming.jndi.CNCtxFactory.getInitialContext(CNCtxFactory.java:53)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.naming.jndi.WrapperInitialContext.lookup(WrapperInitialContext.java:72)
	at java.naming/javax.naming.InitialContext.lookup(InitialContext.java:409)
	at java.naming/javax.naming.InitialContext.lookup(InitialContext.java:409)
	at org.jboss.as.ejb3@14.0.0.CR1-SNAPSHOT//org.jboss.as.ejb3.deployment.processors.EjbLookupInjectionSource$1.getReference(EjbLookupInjectionSource.java:81)
	... 219 more
Caused by: org.omg.CORBA.COMM_FAILURE:   vmcid: SUN  minor code: 201  completed: No
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.logging.ORBUtilSystemException.connectFailure(ORBUtilSystemException.java:2200)
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.logging.ORBUtilSystemException.connectFailure(ORBUtilSystemException.java:2221)
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.<init>(SocketOrChannelConnectionImpl.java:223)
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.<init>(SocketOrChannelConnectionImpl.java:236)
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.transport.SocketOrChannelContactInfoImpl.createConnection(SocketOrChannelContactInfoImpl.java:131)
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.protocol.CorbaClientRequestDispatcherImpl.beginRequest(CorbaClientRequestDispatcherImpl.java:187)
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.request(CorbaClientDelegateImpl.java:137)
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.is_a(CorbaClientDelegateImpl.java:229)
	at javax.orb.api@8.1.2.Final//org.omg.CORBA.portable.ObjectImpl._is_a(ObjectImpl.java:130)
	at javax.orb.api@8.1.2.Final//org.omg.CosNaming.NamingContextHelper.narrow(NamingContextHelper.java:69)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.naming.jndi.CNCtx.setOrbAndRootContext(CNCtx.java:353)
	... 228 more
Caused by: java.net.ConnectException: Connection refused
	at java.base/sun.nio.ch.Net.connect0(Native Method)
	at java.base/sun.nio.ch.Net.connect(Net.java:482)
	at java.base/sun.nio.ch.Net.connect(Net.java:474)
	at java.base/sun.nio.ch.SocketChannelImpl.connect(SocketChannelImpl.java:694)
	at java.base/java.nio.channels.SocketChannel.open(SocketChannel.java:194)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.security.SocketFactoryBase.createSocket(SocketFactoryBase.java:68)
	at org.wildfly.iiop-openjdk@14.0.0.CR1-SNAPSHOT//org.wildfly.iiop.openjdk.security.NoSSLSocketFactory.createSocket(NoSSLSocketFactory.java:59)
	at javax.orb.api@8.1.2.Final//com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.<init>(SocketOrChannelConnectionImpl.java:207)
	... 236 more
WFLY-10951

WFLY-10812 JDK11 - SSLException caused by SocketException: Broken pipe

Following exception occure instead of SSLHandshakeException | SocketException:

javax.net.ssl.SSLException: readHandshakeRecord
Caused by: java.net.SocketException: Broken pipe (Write failed)

To reproduce:

cd testsuite/integration/elytron
JAVA_HOME=/opt/jdk-11/ PATH=$JAVA_HOME/bin:$PATH mvn test -Dtest=UndertowTwoWaySslNeedClientAuthTestCase
cd testsuite/integration/manualmode
JAVA_HOME=/opt/jdk-11+28/ PATH=$JAVA_HOME/bin:$PATH mvn test -Dtest=HTTPSWebConnectorTestCase
WFLY-10950

WFLY-10812 JDK11 basic LdapLoginModuleTestCase: No subject alternative names present

cd testsuite/integration/basic
JAVA_HOME=/opt/jdk-11/ PATH=$JAVA_HOME/bin:$PATH mvn test -Dtest=LdapLoginModuleTestCase#testLdaps -Djavax.net.debug=all
javax.net.ssl|ERROR|1D|NioProcessor-5|2018-08-30 12:28:39.055 CEST|TransportContext.java:317|Fatal (CERTIFICATE_UNKNOWN): Received fatal alert: certificate_unknown (
"throwable" : {
  javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
  	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:128)
  	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
  	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:312)
  	at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:270)
  	at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:181)
  	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
  	at java.base/sun.security.ssl.SSLEngineImpl.decode(SSLEngineImpl.java:666)
  	at java.base/sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:621)
  	at java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:438)
  	at java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:417)
  	at java.base/javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:626)
  	at org.apache.mina.filter.ssl.SslHandler.unwrap(SslHandler.java:754)

Edit: the backing error is:

2018-08-31 15:23:47,788 ERROR [stderr] (default task-1) "throwable" : {
2018-08-31 15:23:47,788 ERROR [stderr] (default task-1)   java.security.cert.CertificateException: No subject alternative names present
2018-08-31 15:23:47,788 ERROR [stderr] (default task-1)   	at java.base/sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:137)
2018-08-31 15:23:47,788 ERROR [stderr] (default task-1)   	at java.base/sun.security.util.HostnameChecker.match(HostnameChecker.java:96)
2018-08-31 15:23:47,788 ERROR [stderr] (default task-1)   	at java.base/sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:463)
2018-08-31 15:23:47,788 ERROR [stderr] (default task-1)   	at java.base/sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:434)
2018-08-31 15:23:47,788 ERROR [stderr] (default task-1)   	at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:233)
2018-08-31 15:23:47,789 ERROR [stderr] (default task-1)   	at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129)
2018-08-31 15:23:47,789 ERROR [stderr] (default task-1)   	at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:626)
2018-08-31 15:23:47,789 ERROR [stderr] (default task-1)   	at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461)
2018-08-31 15:23:47,789 ERROR [stderr] (default task-1)   	at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361)
2018-08-31 15:23:47,789 ERROR [stderr] (default task-1)   	at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
WFLY-10945

WFLY-10812 JDK11 ws testsuite SSL failures

ws testsuite failures on JDK-11:

  • missing local IP in SubjectAlternativeNamesExtension
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 + TLS1.2 seems buggy on JDK-11: Invalid ECDH ServerKeyExchange signature
  • not issue after switching to TLS1.1 or to ciphersuite TLS_RSA_WITH_AES_256_CBC_SHA256 -> JDK bug

Cancel