cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alireza Eskandari (JIRA)" <j...@apache.org>
Subject [jira] [Created] (CLOUDSTACK-10192) Using SSL for database and JMX simultaneously
Date Sat, 16 Dec 2017 13:53:00 GMT
Alireza Eskandari created CLOUDSTACK-10192:
----------------------------------------------

             Summary: Using SSL for database and JMX simultaneously
                 Key: CLOUDSTACK-10192
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10192
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Management Server
    Affects Versions: 4.9.3.0
            Reporter: Alireza Eskandari


Environment:
CloudStack 4.9.3.0
MariaDB Cluster on Galera
Java 1.7.0_151
CentOS 6.9

I'm using MariaDB over SSL so CloudStack communicate to its database securely.
I can use JMX remote without SSL but when I try to enable SSL on JMX traffic, I can't start
CloudStack.

Here is JAVA_OPTS in tomcat6.conf:
JAVA_OPTS="-Djava.awt.headless=true -Xmx2g -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/log/cloudstack/management/
-XX:PermSize=512M -XX:MaxPermSize=800m -Djava.security.properties=/etc/cloudstack/management/java.security.ciphers
-Dcom.sun.management.jmxremote -Djava.rmi.server.hostname=CLST01.cloud.local -Dcom.sun.management.jmxremote.port=45219
-Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.password.file=/etc/cloudstack/management/jmxremote.password
-Dcom.sun.management.jmxremote.access.file=/etc/cloudstack/management/jmxremote.access -Dcom.sun.management.jmxremote.ssl=true
-Djavax.net.ssl.keyStore=/etc/ssl/certs/jmx/clst01.keystore -Djavax.net.ssl.keyStorePassword=xxxxxxx"

This is content of catalina.out:

INFO  [c.c.u.d.T.Transaction] (main:null) (logid:) Is Data Base High Availiability enabled?
Ans : true
INFO  [c.c.u.d.T.Transaction] (main:null) (logid:) The slaves configured for Cloud Data base
is/are : csdb02.cloud.local
ERROR [c.c.u.d.Merovingian2] (main:null) (logid:) Unable to get a new db connection
com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: Cannot connect to MySQL
server on csdb1.cloud.local:3306.

Make sure that there is a MySQL server running on the machine/port you are trying to connect
to and that the machine this software is running on is able to connect to this host/port (i.e.
not firewalled). Also make sure that the server has not been started with the --skip-networking
flag.


        at sun.reflect.GeneratedConstructorAccessor39.newInstance(Unknown Source)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at com.mysql.jdbc.Util.handleNewInstance(Util.java:411)
        at com.mysql.jdbc.Util.getInstance(Util.java:386)
        at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1013)
        at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:987)
        at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:982)
        at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:927)
        at com.mysql.jdbc.ConnectionImpl.<init>(ConnectionImpl.java:825)
        at com.mysql.jdbc.JDBC4Connection.<init>(JDBC4Connection.java:49)
        at sun.reflect.GeneratedConstructorAccessor33.newInstance(Unknown Source)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at com.mysql.jdbc.Util.handleNewInstance(Util.java:411)
        at com.mysql.jdbc.ConnectionImpl.getInstance(ConnectionImpl.java:381)
        at com.mysql.jdbc.LoadBalancingConnectionProxy.createConnectionForHost(LoadBalancingConnectionProxy.java:376)
        at com.cloud.utils.db.StaticStrategy.pickConnection(StaticStrategy.java:77)
        at com.mysql.jdbc.LoadBalancingConnectionProxy.pickNewConnection(LoadBalancingConnectionProxy.java:593)
        at com.mysql.jdbc.FailoverConnectionProxy.failOver(FailoverConnectionProxy.java:186)
        at com.mysql.jdbc.FailoverConnectionProxy.pickNewConnection(FailoverConnectionProxy.java:171)
        at com.mysql.jdbc.LoadBalancingConnectionProxy.<init>(LoadBalancingConnectionProxy.java:329)
        at com.mysql.jdbc.FailoverConnectionProxy.<init>(FailoverConnectionProxy.java:66)
        at com.mysql.jdbc.NonRegisteringDriver.connectFailover(NonRegisteringDriver.java:382)
        at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:301)
        at java.sql.DriverManager.getConnection(DriverManager.java:571)
        at java.sql.DriverManager.getConnection(DriverManager.java:215)
        at org.apache.commons.dbcp.DriverManagerConnectionFactory.createConnection(DriverManagerConnectionFactory.java:75)
        at org.apache.commons.dbcp.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:582)
        at org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:1188)
        at org.apache.commons.dbcp.PoolingDataSource.getConnection(PoolingDataSource.java:106)
        at com.cloud.utils.db.TransactionLegacy.getStandaloneConnectionWithException(TransactionLegacy.java:212)
        at com.cloud.utils.db.Merovingian2.<init>(Merovingian2.java:68)
        at com.cloud.utils.db.Merovingian2.createLockMaster(Merovingian2.java:88)
        at com.cloud.server.LockMasterListener.<init>(LockMasterListener.java:33)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:148)
        at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:121)
        at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:277)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1077)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:981)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:487)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:458)
        at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:293)
        at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:223)
        at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:290)
        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:191)
        at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:636)
        at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:938)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:479)
        at org.apache.cloudstack.spring.module.model.impl.DefaultModuleDefinitionSet.loadContext(DefaultModuleDefinitionSet.java:145)
        at org.apache.cloudstack.spring.module.model.impl.DefaultModuleDefinitionSet$2.with(DefaultModuleDefinitionSet.java:122)
        at org.apache.cloudstack.spring.module.model.impl.DefaultModuleDefinitionSet.withModule(DefaultModuleDefinitionSet.java:245)
        at org.apache.cloudstack.spring.module.model.impl.DefaultModuleDefinitionSet.withModule(DefaultModuleDefinitionSet.java:250)
        at org.apache.cloudstack.spring.module.model.impl.DefaultModuleDefinitionSet.withModule(DefaultModuleDefinitionSet.java:233)
        at org.apache.cloudstack.spring.module.model.impl.DefaultModuleDefinitionSet.loadContexts(DefaultModuleDefinitionSet.java:117)
        at org.apache.cloudstack.spring.module.model.impl.DefaultModuleDefinitionSet.load(DefaultModuleDefinitionSet.java:79)
        at org.apache.cloudstack.spring.module.factory.ModuleBasedContextFactory.loadModules(ModuleBasedContextFactory.java:37)
        at org.apache.cloudstack.spring.module.factory.CloudStackSpringContext.init(CloudStackSpringContext.java:71)
        at org.apache.cloudstack.spring.module.factory.CloudStackSpringContext.<init>(CloudStackSpringContext.java:58)
        at org.apache.cloudstack.spring.module.factory.CloudStackSpringContext.<init>(CloudStackSpringContext.java:62)
        at org.apache.cloudstack.spring.module.web.CloudStackContextLoaderListener.contextInitialized(CloudStackContextLoaderListener.java:52)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4244)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4743)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:526)
        at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1041)
        at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:964)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:502)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1277)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:321)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:142)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
        at org.apache.catalina.core.StandardService.start(StandardService.java:516)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:593)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:606)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
Caused by: java.lang.UnsupportedOperationException: The method shutdownInput() is not supported
in SSLSocket
        at sun.security.ssl.BaseSSLSocketImpl.shutdownInput(BaseSSLSocketImpl.java:199)
        at com.mysql.jdbc.MysqlIO.forceClose(MysqlIO.java:507)
        at com.mysql.jdbc.ConnectionImpl.connectOneTryOnly(ConnectionImpl.java:2403)
        ... 81 more
WARN  [o.a.c.s.m.c.ResourceApplicationContext] (main:null) (logid:) Exception encountered
during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'lockMasterListener' defined in URL [jar:file:/usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-server-4.9.3.0.jar!/META-INF/cloudstack/system/spring-server-system-context.xml]:
Instantiation of bean failed; nested exception is org.springframework.beans.BeanInstantiationException:
Could not instantiate bean class [com.cloud.server.LockMasterListener]: Constructor threw
exception; nested exception is com.cloud.utils.exception.CloudRuntimeException: Unable to
initialize a connection to the database for locking purposes
Dec 16, 2017 4:43:20 PM org.apache.catalina.core.StandardContext start
SEVERE: Error listenerStart
Dec 16, 2017 4:43:20 PM org.apache.catalina.core.StandardContext start
SEVERE: Context [/client] startup failed due to previous errors
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
SEVERE: A web application appears to have started a thread named [FileWatchdog] but has failed
to stop it. This is very likely to create a memory leak.
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearReferencesThreads
SEVERE: A web application appears to have started a thread named [Timer-0] but has failed
to stop it. This is very likely to create a memory leak.
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
SEVERE: A web application created a ThreadLocal with key of type [org.apache.log4j.helpers.ThreadLocalMap]
(value [org.apache.log4j.helpers.ThreadLocalMap@1956a44c]) and a value of type [null] (value
[null]) but failed to remove it when the web application was stopped. To prevent a memory
leak, the ThreadLocal has been forcibly removed.
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
SEVERE: A web application created a ThreadLocal with key of type [org.springframework.core.NamedThreadLocal]
(value [Prototype beans currently in creation]) and a value of type [null] (value [null])
but failed to remove it when the web application was stopped. To prevent a memory leak, the
ThreadLocal has been forcibly removed.
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
SEVERE: A web application created a ThreadLocal with key of type [org.springframework.core.NamedThreadLocal]
(value [Prototype beans currently in creation]) and a value of type [null] (value [null])
but failed to remove it when the web application was stopped. To prevent a memory leak, the
ThreadLocal has been forcibly removed.
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
SEVERE: A web application created a ThreadLocal with key of type [org.springframework.core.NamedThreadLocal]
(value [Prototype beans currently in creation]) and a value of type [null] (value [null])
but failed to remove it when the web application was stopped. To prevent a memory leak, the
ThreadLocal has been forcibly removed.
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
SEVERE: A web application created a ThreadLocal with key of type [org.apache.log4j.helpers.ThreadLocalMap]
(value [org.apache.log4j.helpers.ThreadLocalMap@1956a44c]) and a value of type [null] (value
[null]) but failed to remove it when the web application was stopped. To prevent a memory
leak, the ThreadLocal has been forcibly removed.
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
SEVERE: A web application created a ThreadLocal with key of type [org.apache.log4j.helpers.ThreadLocalMap]
(value [org.apache.log4j.helpers.ThreadLocalMap@1956a44c]) and a value of type [null] (value
[null]) but failed to remove it when the web application was stopped. To prevent a memory
leak, the ThreadLocal has been forcibly removed.
Dec 16, 2017 4:43:20 PM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap
SEVERE: A web application created a ThreadLocal with key of type [org.apache.log4j.helpers.ThreadLocalMap]
(value [org.apache.log4j.helpers.ThreadLocalMap@1956a44c]) and a value of type [null] (value
[null]) but failed to remove it when the web application was stopped. To prevent a memory
leak, the ThreadLocal has been forcibly removed.
Dec 16, 2017 4:43:20 PM org.apache.coyote.http11.Http11NioProtocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
Dec 16, 2017 4:43:20 PM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8443
Dec 16, 2017 4:43:21 PM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:20400
Dec 16, 2017 4:43:21 PM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/75  config=null
Dec 16, 2017 4:43:21 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 37021 ms



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message