Bug 1344555

Summary: Newly minted 'pki-core-10.3.2-3.el7' fails on Agent Page using Firefox Browser
Product: Red Hat Enterprise Linux 7 Reporter: Matthew Harmsen <mharmsen>
Component: pki-coreAssignee: RHCS Maintainers <rhcs-maint>
Status: CLOSED DUPLICATE QA Contact: Asha Akkiangady <aakkiang>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.3CC: alee, cfu, edewata, jmagne, mharmsen, nkinder
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-06-11 00:02:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
pkispawn.log typescript
none
localhost.2016-06-09.log none

Description Matthew Harmsen 2016-06-10 03:31:23 UTC
Created attachment 1166455 [details]
pkispawn.log typescript

Doing the following smoke test, the CA Agent page failed to load in the Firefox Browser.

Used the following procedure:
* git clone -b DOGTAG_10_3_RHEL_BRANCH ssh://git.app.eng.bos.redhat.com/srv/git/pki.git (NOTE:  All source code from master has been checked into this branch and the spec files have all been updated and checked-in)
* used compose scripts to build and install RHEL 7.3 pki packages and the redhat-pki-server-theme package from RHCS 9.1 for testing.
* pkispawn -s CA -f /root/pki/ca.cfg -vvv
  where 'ca.cfg' contains:
      [DEFAULT]
      pki_admin_password=<password>
      pki_client_pkcs12_password=<password>
      pki_ds_password=<password>
* launched Firefox with a new profile
* Admin page loaded successfully
* EE page loaded successfully
* Successfully imported CA Certificate and trusted it
* Used preferences to successfully import the Admin Certificate
* Choose this Admin Certificate to load Agent Page which FAILED with the following errors:

HTTP Status 500 - org.apache.tomcat.util.net.jss.JSSSupport.getProtocol()Ljava/lang/String;

type Exception report

message org.apache.tomcat.util.net.jss.JSSSupport.getProtocol()Ljava/lang/String;

description The server encountered an internal error that prevented it from fulfilling this request.

exception

javax.servlet.ServletException: org.apache.tomcat.util.net.jss.JSSSupport.getProtocol()Ljava/lang/String;
	org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:343)
	org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:175)
	java.security.AccessController.doPrivileged(Native Method)
	org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
	sun.reflect.GeneratedMethodAccessor35.invoke(Unknown Source)
	sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	java.lang.reflect.Method.invoke(Method.java:498)
	org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:288)
	org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:285)
	java.security.AccessController.doPrivileged(Native Method)
	javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
	org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:320)
	org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:260)

root cause

java.lang.AbstractMethodError: org.apache.tomcat.util.net.jss.JSSSupport.getProtocol()Ljava/lang/String;
	org.apache.coyote.http11.Http11Processor.actionInternal(Http11Processor.java:268)
	org.apache.coyote.http11.AbstractHttp11Processor.action(AbstractHttp11Processor.java:910)
	org.apache.coyote.Request.action(Request.java:347)
	org.apache.catalina.connector.Request.getAttribute(Request.java:961)
	org.apache.catalina.connector.RequestFacade.getAttribute(RequestFacade.java:283)
	com.netscape.cms.servlet.base.CMSServlet.getSSLClientCertificate(CMSServlet.java:859)
	com.netscape.cms.servlet.base.CMSServlet.authenticate(CMSServlet.java:1744)
	com.netscape.cms.servlet.base.CMSServlet.authenticate(CMSServlet.java:1691)
	com.netscape.cms.servlet.base.CMSServlet.authenticate(CMSServlet.java:1681)
	com.netscape.cms.servlet.base.DisplayHtmlServlet.process(DisplayHtmlServlet.java:65)
	com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:514)
	javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
	sun.reflect.GeneratedMethodAccessor36.invoke(Unknown Source)
	sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	java.lang.reflect.Method.invoke(Method.java:498)
	org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:288)
	org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:285)
	java.security.AccessController.doPrivileged(Native Method)
	javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
	org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:320)
	org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:175)
	java.security.AccessController.doPrivileged(Native Method)
	org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
	sun.reflect.GeneratedMethodAccessor35.invoke(Unknown Source)
	sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	java.lang.reflect.Method.invoke(Method.java:498)
	org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:288)
	org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:285)
	java.security.AccessController.doPrivileged(Native Method)
	javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
	org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:320)
	org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:260)

note The full stack trace of the root cause is available in the Apache Tomcat/7.0.69 logs.
Apache Tomcat/7.0.69

Machine Operating System:
# cat /etc/redhat-release
Red Hat Enterprise Linux Workstation release 7.2 (Maipo)

RPMS of interest:
* java-1.8.0-openjdk-1.8.0.91-0.b14.el7_2.x86_64
* java-1.8.0-openjdk-devel-1.8.0.91-0.b14.el7_2.x86_64
* java-1.8.0-openjdk-headless-1.8.0.91-0.b14.el7_2.x86_64
* jss-4.2.6-40.el7.x86_64
* pki-base-10.3.2-3.el7pki.noarch
* pki-base-java-10.3.2-3.el7pki.noarch
* pki-ca-10.3.2-3.el7pki.noarch
* pki-kra-10.3.2-3.el7pki.noarch
* pki-server-10.3.2-3.el7pki.noarch
* pki-symkey-10.3.2-3.el7pki.x86_64
* pki-tools-10.3.2-3.el7pki.x86_64
* redhat-pki-server-theme-10.3.2-2.el7pki.noarch
* tomcat-7.0.69-2.el7.noarch
* tomcat-el-2.2-api-7.0.69-2.el7.noarch
* tomcat-jsp-2.2-api-7.0.69-2.el7.noarch
* tomcat-lib-7.0.69-2.el7.noarch
* tomcat-servlet-3.0-api-7.0.69-2.el7.noarch
* tomcatjss-7.1.2-1.el7.noarch

Comment 1 Matthew Harmsen 2016-06-10 03:32:14 UTC
Created attachment 1166456 [details]
localhost.2016-06-09.log

Comment 4 Matthew Harmsen 2016-06-11 00:02:32 UTC
This bug was caused by using an older version of tomcatjss.

Since Tomcat moved from 7.0.54 ==> 7.0.69, an upstream patch required being back-ported to tomcatjss in RHEL 7.3.

Ergo, marking this bug as a duplicate of [https://bugzilla.redhat.com/show_bug.cgi?id=1344804 Bugzilla Bug #1344804 - Build failure on RHEL 7.3].

*** This bug has been marked as a duplicate of bug 1344804 ***