Discussion:
[Ejbca-develop] Error Configure TLS (https) EJBCA & Jboss
i***@ipoft.com
2017-07-13 10:27:39 UTC
Permalink
Hello,

I’m trying to setup HTTPS protocol for my EJBCA instance to be able to access the administration module, which is by default accessible only via HTTPS.

I`m using:
— JBoss EAP 6.4.0.GA
— Ejbca CE 6.5.0.5

I have followed the installation guide and have EJBCA app up and running. However, when I try to execute commands from HTTPS setup section in the guide the following to command fail and I have no clue why:

[***@localhost:9999 /] /subsystem=undertow/server=default-server/https-listener=httpspub:add(socket-binding=httpspub, security-realm="SSLRealm")
Failed to get the list of the operation properties: "JBAS014883: No resource definition is registered for address [
("subsystem" => "undertow"),
("server" => "default-server"),
("https-listener" => "httpspub")
]"

[***@localhost:9999 /] /subsystem=undertow/server=default-server/https-listener=httpspriv:add(socket-binding=httpspriv, security-realm="SSLRealm", verify-client=REQUIRED)
Failed to get the list of the operation properties: "JBAS014883: No resource definition is registered for address [
("subsystem" => "undertow"),
("server" => "default-server"),
("https-listener" => "httpspriv")
]"


All other commands on this (https://www.ejbca.org/docs/installation.html#Installation%20guide) installation guide finish successfully.

After start Jboss (standalone.sh) I get long log, and next line:

ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4) MSC000001: Failed to start service jboss.server.controller.management.security_realm.SSLRealm.key-manager: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.SSLRealm.key-manager: JBAS015229: Unable to start service
at org.jboss.as.domain.management.security.JKSKeystore.load(JKSKeystore.java:130)
at org.jboss.as.domain.management.security.JKSKeyManagerService.start(JKSKeyManagerService.java:100)
at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1980) [jboss-msc-1.1.5.Final-redhat-1.jar:1.1.5.Final-redhat-1]
at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1913) [jboss-msc-1.1.5.Final-redhat-1.jar:1.1.5.Final-redhat-1]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [rt.jar:1.8.0_131]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [rt.jar:1.8.0_131]
at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_131]
Caused by: java.io.FileNotFoundException: /opt/jboss/standalone/configuration/keystore (Is a directory)
at java.io.FileInputStream.open0(Native Method) [rt.jar:1.8.0_131]
at java.io.FileInputStream.open(FileInputStream.java:195) [rt.jar:1.8.0_131]
at java.io.FileInputStream.<init>(FileInputStream.java:138) [rt.jar:1.8.0_131]
at java.io.FileInputStream.<init>(FileInputStream.java:93) [rt.jar:1.8.0_131]
at org.jboss.as.domain.management.security.JKSKeystore.load(JKSKeystore.java:103)
... 6 more

In directory /opt/jboss/standalone/configuration/keystore there are the following files: keystore.jks truststore.jks

And, when Jboss is run, I get next line:

INFO [org.jboss.as.controller] (Controller Boot Thread) JBAS014774: Service status report
JBAS014777: Services which failed to start: service jboss.server.controller.management.security_realm.SSLRealm.key-manager: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.SSLRealm.key-manager: JBAS015229: Unable to start service

ERROR [org.jboss.as] (Controller Boot Thread) JBAS015875: JBoss EAP 6.4.0.GA (AS 7.5.0.Final-redhat-21) started (with errors) in 11425ms - Started 2803 of 2848 services (3 services failed or missing dependencies, 107 services are lazy, passive or on-demand)

Please, would you be so kind to provide me with any hints on what I’m doing wrong. I do need to have HTTPS running for my EJBCA to continue evaluation.

Thank you in advance!

Ivan Pashchuk
Tomas Gustavsson
2017-07-16 08:11:26 UTC
Permalink
Hi, 

Are you trying the commands for wildfly on jboss EAP 6.4?
I don't think that will work. 

Regards, 
Tomas 
Post by i***@ipoft.com
Hello,
I’m trying to setup HTTPS protocol for my EJBCA instance to be able to
access the administration module, which is by default accessible only
via HTTPS.
— JBoss EAP 6.4.0.GA
— Ejbca CE 6.5.0.5
I have followed the installation guide and have EJBCA app up and
running. However, when I try to execute commands from HTTPS setup
section in the guide the following to command fail and I have no clue
/subsystem=undertow/server=default-server/https-listener=httpspub:add(socket-binding=httpspub,
security-realm="SSLRealm")
Failed to get the list of the operation properties: "JBAS014883: No
resource definition is registered for address [
("subsystem" => "undertow"),
("server" => "default-server"),
("https-listener" => "httpspub")
]"
/subsystem=undertow/server=default-server/https-listener=httpspriv:add(socket-binding=httpspriv,
security-realm="SSLRealm", verify-client=REQUIRED)
Failed to get the list of the operation properties: "JBAS014883: No
resource definition is registered for address [
("subsystem" => "undertow"),
("server" => "default-server"),
("https-listener" => "httpspriv")
]"
All other commands on this
(https://www.ejbca.org/docs/installation.html#Installation%20guide)
installation guide finish successfully.
Failed to start service
org.jboss.msc.service.StartException in service
JBAS015229: Unable to start service
at
org.jboss.as.domain.management.security.JKSKeystore.load(JKSKeystore.java:130)
at
org.jboss.as.domain.management.security.JKSKeyManagerService.start(JKSKeyManagerService.java:100)
at
org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1980)
[jboss-msc-1.1.5.Final-redhat-1.jar:1.1.5.Final-redhat-1]
at
org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1913)
[jboss-msc-1.1.5.Final-redhat-1.jar:1.1.5.Final-redhat-1]
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
[rt.jar:1.8.0_131]
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
[rt.jar:1.8.0_131]
at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_131]
/opt/jboss/standalone/configuration/keystore (Is a directory)
at java.io.FileInputStream.open0(Native Method) [rt.jar:1.8.0_131]
at java.io.FileInputStream.open(FileInputStream.java:195)
[rt.jar:1.8.0_131]
at java.io.FileInputStream.<init>(FileInputStream.java:138)
[rt.jar:1.8.0_131]
at java.io.FileInputStream.<init>(FileInputStream.java:93)
[rt.jar:1.8.0_131]
at
org.jboss.as.domain.management.security.JKSKeystore.load(JKSKeystore.java:103)
... 6 more
In directory /opt/jboss/standalone/configuration/keystore there are the
following files: keystore.jks truststore.jks
INFO [org.jboss.as.controller] (Controller Boot Thread) JBAS014774: Service status report
JBAS014777: Services which failed to start: service
org.jboss.msc.service.StartException in service
JBAS015229: Unable to start service
ERROR [org.jboss.as] (Controller Boot Thread) JBAS015875: JBoss EAP
6.4.0.GA (AS 7.5.0.Final-redhat-21) started (with errors) in 11425ms -
Started 2803 of 2848 services (3 services failed or missing
dependencies, 107 services are lazy, passive or on-demand)
Please, would you be so kind to provide me with any hints on what I’m
doing wrong. I do need to have HTTPS running for my EJBCA to continue
evaluation.
Thank you in advance!
Ivan Pashchuk
Loading...