admin@glassfish.java.net

Problem with secure admin?

From: Joe Di Pol <joe.dipol_at_oracle.com>
Date: Tue, 11 Jan 2011 18:28:18 -0800

I'm running a private build based on r44408. When I enable secure-admin
I start having trouble making connections to the DAS -- sometimes even
when on the same host. I'm using JDK 1.6.0_23. I've seen this on Linux
and Solaris 11. Here is what I do:

asadmin start-domain
asadmin enable-secure-admin
asadmin stop-domain
asadmin start-domain

This all seems to work OK. Then I try:

asadmin version

and it can't connect to localhost:4848

Note that I was never presented with a certificate to accept.

The DAS log has the exception below. Is anybody else seeing a problem?
I will try to reproduce with an formal build.

Joe


[#|2011-01-11T18:10:07.674-0800|WARNING|glassfish3.1|com.sun.grizzly.config.GrizzlyServiceListener|_ThreadID=19;_ThreadName=Thread-1;|processorTask.exceptionSSLcert
javax.net.ssl.SSLHandshakeException: Insecure renegotiation is not allowed
        at com.sun.net.ssl.internal.ssl.SSLEngineImpl.kickstartHandshake(SSLEngineImpl.java:635)
        at com.sun.net.ssl.internal.ssl.SSLEngineImpl.beginHandshake(SSLEngineImpl.java:689)
        at com.sun.grizzly.util.SSLUtils.doPeerCertificateChain(SSLUtils.java:559)
        at com.sun.grizzly.filter.SSLReadFilter.doPeerCertificateChain(SSLReadFilter.java:340)
        at com.sun.grizzly.ssl.SSLProcessorTask.action(SSLProcessorTask.java:153)
        at com.sun.grizzly.tcp.Request.action(Request.java:430)
        at com.sun.grizzly.tcp.http11.GrizzlyRequest.getAttribute(GrizzlyRequest.java:835)
        at com.sun.grizzly.tcp.http11.GrizzlyRequest.getUserPrincipal(GrizzlyRequest.java:1834)
        at com.sun.enterprise.v3.admin.AdminAdapter.authenticate(AdminAdapter.java:266)
        at com.sun.enterprise.v3.admin.AdminAdapter.authenticate(AdminAdapter.java:309)
        at com.sun.enterprise.v3.admin.AdminAdapter.service(AdminAdapter.java:218)
        at com.sun.grizzly.tcp.http11.GrizzlyAdapter.service(GrizzlyAdapter.java:168)
        at com.sun.enterprise.v3.server.HK2Dispatcher.dispath(HK2Dispatcher.java:117)
        at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:234)
        at com.sun.grizzly.http.ProcessorTask.invokeAdapter(ProcessorTask.java:818)
        at com.sun.grizzly.http.ProcessorTask.doProcess(ProcessorTask.java:719)
        at com.sun.grizzly.http.ProcessorTask.process(ProcessorTask.java:1008)
        at com.sun.grizzly.http.DefaultProtocolFilter.execute(DefaultProtocolFilter.java:225)
        at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
        at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
        at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
        at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
        at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
        at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
        at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
        at java.lang.Thread.run(Thread.java:662)
|#]

[#|2011-01-11T18:10:07.682-0800|SEVERE|glassfish3.1|com.sun.grizzly.config.GrizzlyServiceListener|_ThreadID=19;_ThreadName=Thread-1;|service
exception
java.lang.RuntimeException: ClientAbortException: java.io.IOException: SSLOutputWriter:
CLOSED
        at com.sun.enterprise.v3.admin.AdminAdapter.service(AdminAdapter.java:254)
        at com.sun.grizzly.tcp.http11.GrizzlyAdapter.service(GrizzlyAdapter.java:168)
        at com.sun.enterprise.v3.server.HK2Dispatcher.dispath(HK2Dispatcher.java:117)
        at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:234)
        at com.sun.grizzly.http.ProcessorTask.invokeAdapter(ProcessorTask.java:818)
        at com.sun.grizzly.http.ProcessorTask.doProcess(ProcessorTask.java:719)
        at com.sun.grizzly.http.ProcessorTask.process(ProcessorTask.java:1008)
        at com.sun.grizzly.http.DefaultProtocolFilter.execute(DefaultProtocolFilter.java:225)
        at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
        at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
        at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
        at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
        at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
        at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
        at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
        at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
        at java.lang.Thread.run(Thread.java:662)
Caused by: ClientAbortException: java.io.IOException: SSLOutputWriter: CLOSED
        at com.sun.grizzly.tcp.http11.GrizzlyOutputBuffer.doFlush(GrizzlyOutputBuffer.java:439)
        at com.sun.grizzly.tcp.http11.GrizzlyOutputBuffer.flush(GrizzlyOutputBuffer.java:405)
        at com.sun.grizzly.tcp.http11.GrizzlyOutputStream.flush(GrizzlyOutputStream.java:140)
        at com.sun.enterprise.v3.admin.AdminAdapter.service(AdminAdapter.java:251)
        ... 17 more
Caused by: java.io.IOException: SSLOutputWriter: CLOSED
        at com.sun.grizzly.util.SSLOutputWriter.flushChannel(SSLOutputWriter.java:98)
        at com.sun.grizzly.ssl.SSLOutputBuffer.flushChannel(SSLOutputBuffer.java:138)
        at
com.sun.grizzly.http.SocketChannelOutputBuffer.flushBuffer(SocketChannelOutputBuffer.java:398)
        at com.sun.grizzly.http.SocketChannelOutputBuffer.flush(SocketChannelOutputBuffer.java:376)
        at com.sun.grizzly.http.ProcessorTask.action(ProcessorTask.java:1236)
        at com.sun.grizzly.ssl.SSLProcessorTask.action(SSLProcessorTask.java:164)
        at com.sun.grizzly.tcp.Response.action(Response.java:268)
        at com.sun.grizzly.tcp.http11.GrizzlyOutputBuffer.doFlush(GrizzlyOutputBuffer.java:434)
        ... 20 more
|#]