Application Server 3  4  5 and 6
  1. Application Server 3 4 5 and 6
  2. JBAS-7163

Configuring IIOP over SSL causes IOException on startup

    Details

    • Type: Bug Bug
    • Status: Closed Closed (View Workflow)
    • Priority: Major Major
    • Resolution: Done
    • Affects Version/s: JBossAS-5.1.0.GA
    • Fix Version/s: 6.0.0.M2
    • Component/s: IIOP service, Security
    • Security Level: Public (Everyone can see)
    • Labels:
      None
    • Environment:
      Windows XP repeatable with jdk 1.6.0_15 and jdk 1.5.0_20
    • Affects:
      Compatibility/Configuration
    • Similar Issues:
      Show 10 results 

      Description

      Perform the following steps:

      1. Edit server/all/conf/jacorb.properties - set jacorb.security.support_ssl=on
      2. Edit server/all/deploy/iiop-service.xml - uncomment the JaasSecurityDomain mbean and fill in valid key details then uncomment the SecurityDomain attribute and depends element of the CorbaORBService mbean.

      Start up with JBOSS 5.1.0-GA:

      13:31:56,207 WARN [CorbaORBService] Security domain java:/jaas/IIOP+SSL not found
      13:31:56,442 INFO [SSLServerSocketFactory] Creating
      13:31:56,442 WARN [SSLServerSocketFactory] Could not create DomainServerSocketFactory: java.io.IOEx
      ception: The securityDomain may not be null
      13:31:56,442 ERROR [AbstractKernelController] Error installing to Start: name=jboss:service=CorbaORB
      state=Create mode=Manual requiredState=Installed
      org.omg.CORBA.INITIALIZE: there was an invocation failure with the socket factory org.jboss.iiop.jac
      orb.SSLServerSocketFactory: java.io.IOException: The securityDomain may not be
      null vmcid: 0x0 minor code: 0 completed: No
      at org.jacorb.orb.factory.SocketFactoryManager.newFactory(Unknown Source)

      The above works successfully on JBOSS 4.2.3-GA

        Activity

        Hide
        Stefan Guilhen
        added a comment -

        The error was caused by a missing dependency in CorbaORBService:

        <!-- uncomment to use IIOP over SSL
        <attribute name="SecurityDomain">java:/jaas/IIOP+SSL</attribute>
        <depends>JBossSecurityJNDIContextEstablishment</depends>
        <depends>jboss.security:service=JaasSecurityDomain,domain=IIOP+SSL</depends>
        -->

        I've added the JBossSecurityJNDIContextEstablishment dependency so now the CorbaORBService will wait until the security domain is available in the JNDI before attempting to create the SSLSocket factories.

        Change has been committed on Branch_5_X and Trunk.

        Show
        Stefan Guilhen
        added a comment - The error was caused by a missing dependency in CorbaORBService: <!-- uncomment to use IIOP over SSL <attribute name="SecurityDomain">java:/jaas/IIOP+SSL</attribute> <depends>JBossSecurityJNDIContextEstablishment</depends> <depends>jboss.security:service=JaasSecurityDomain,domain=IIOP+SSL</depends> --> I've added the JBossSecurityJNDIContextEstablishment dependency so now the CorbaORBService will wait until the security domain is available in the JNDI before attempting to create the SSLSocket factories. Change has been committed on Branch_5_X and Trunk.
        Hide
        Stefan Guilhen
        added a comment -

        Reopening to rectify the fix version.

        Show
        Stefan Guilhen
        added a comment - Reopening to rectify the fix version.

          People

          • Assignee:
            Stefan Guilhen
            Reporter:
            Dan Machera
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: