Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-20442

server.xml in 6.8 line has uncommented SSL connector

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Low
    • 6.9.0, 6.8.2
    • 6.8.0, 6.8.1
    • Tomcat tasks
    • None

    Description

      In Bamboo 6.8.0 & 6.8.1, server.xml has an uncommented SSL connector:

      server.xml
              <!--
              ====================================================================================
              To run Bamboo via HTTPS:
                   * Uncomment the Connector below
                   * Execute:
                       %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)
                       $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA  (Unix)
                     with a password value of "changeit" for both the certificate and the keystore itself.
                   * Restart and visit https://localhost:8443/
      
                   For more info, see :
                    https://confluence.atlassian.com/display/BAMBOO/Securing+Bamboo+with+Tomcat+using+SSL
                    and
                    http://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html
              ====================================================================================
              -->
      
              <Connector
                  port="8443"
      
                  maxThreads="150" minSpareThreads="25"
                  connectionTimeout="20000"
                  disableUploadTimeout="true"
                  acceptCount="100"
      
                  enableLookups="false"
                  maxHttpHeaderSize="8192"
      
                  useBodyEncodingForURI="true"
                  URIEncoding="UTF-8"
      
                  scheme="https" secure="true" SSLEnabled="true" sslProtocol="TLS"
                  clientAuth="false">
                  <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
              </Connector>
      

      6.7.x and 6.9.0 have this connector commented out correctly. This is results in an (expected) error on startup:

      atlassian-bamboo.log
      24-May-2019 01:34:45.093 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["https-jsse-nio-8443"]
      24-May-2019 01:34:45.293 SEVERE [main] org.apache.catalina.core.StandardService.initInternal Failed to initialize connector [Connector[HTTP/1.1-8443]]
       org.apache.catalina.LifecycleException: Failed to initialize component [Connector[HTTP/1.1-8443]]
      	at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:112)
      	at org.apache.catalina.core.StandardService.initInternal(StandardService.java:552)
      	at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:107)
      	at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:875)
      	at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:107)
      	at org.apache.catalina.startup.Catalina.load(Catalina.java:632)
      	at org.apache.catalina.startup.Catalina.load(Catalina.java:655)
      	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
      	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
      	at java.lang.reflect.Method.invoke(Unknown Source)
      	at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:309)
      	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:492)
      Caused by: org.apache.catalina.LifecycleException: Protocol handler initialization failed
      	at org.apache.catalina.connector.Connector.initInternal(Connector.java:995)
      	at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:107)
      	... 12 more
      Caused by: java.lang.IllegalArgumentException: SSLHostConfig attribute certificateFile must be defined when using an SSL connector
      	at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:115)
      	at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:86)
      	at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:244)
      	at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1087)
      	at org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.java:265)
      	at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:581)
      	at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:68)
      	at org.apache.catalina.connector.Connector.initInternal(Connector.java:993)
      	... 13 more
      Caused by: java.io.IOException: SSLHostConfig attribute certificateFile must be defined when using an SSL connector
      	at org.apache.tomcat.util.net.jsse.JSSEUtil.getKeyManagers(JSSEUtil.java:203)
      	at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:113)
      	... 20 more
      

      Workaround

      Manually comment out the SSL connector, or ignore the error

      Attachments

        Issue Links

          Activity

            People

              achystoprudov Alexey Chystoprudov
              dchevell Dave Chevell
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: