How using SSL with Native ececutables #29327
Unanswered
petertsneg
asked this question in
Q&A
Replies: 2 comments 1 reply
-
|
Which version of GraalVM are you using? It would be interesting to get the GraalVM build output. |
Beta Was this translation helpful? Give feedback.
1 reply
-
hi @gsmet , GrallVM Version : 22.3.0 [INFO] Scanning for projects...
[INFO]
[INFO] -------------------< com.lianhwa.ldap:ldap-arch-api >-------------------
[INFO] Building ldap-arch-api 1.0.0
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ ldap-arch-api ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 1 resource
[INFO]
[INFO] --- quarkus-maven-plugin:2.13.3.Final:generate-code (default) @ ldap-arch-api ---
[INFO]
[INFO] --- maven-compiler-plugin:3.8.1:compile (default-compile) @ ldap-arch-api ---
[INFO] Nothing to compile - all classes are up to date
[INFO]
[INFO] --- quarkus-maven-plugin:2.13.3.Final:generate-code-tests (default) @ ldap-arch-api ---
[INFO]
[INFO] --- maven-resources-plugin:2.6:testResources (default-testResources) @ ldap-arch-api ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory /home/peter/Documents/Quarkus/ldap-arch-api/src/test/resources
[INFO]
[INFO] --- maven-compiler-plugin:3.8.1:testCompile (default-testCompile) @ ldap-arch-api ---
[INFO] No sources to compile
[INFO]
[INFO] --- maven-surefire-plugin:3.0.0-M7:test (default-test) @ ldap-arch-api ---
[INFO]
[INFO] --- maven-jar-plugin:2.4:jar (default-jar) @ ldap-arch-api ---
[INFO] Building jar: /home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0.jar
[INFO]
[INFO] --- quarkus-maven-plugin:2.13.3.Final:build (default) @ ldap-arch-api ---
[INFO] [io.quarkus.deployment.pkg.steps.JarResultBuildStep] Building native image source jar: /home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0-native-image-source-jar/ldap-arch-api-1.0.0-runner.jar
[INFO] [io.quarkus.deployment.pkg.steps.NativeImageBuildStep] Building native image from /home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0-native-image-source-jar/ldap-arch-api-1.0.0-runner.jar
[INFO] [io.quarkus.deployment.pkg.steps.NativeImageBuildStep] Running Quarkus native-image plugin on GraalVM 22.3.0 Java 11 CE (Java Version 11.0.17+8-jvmci-22.3-b08)
[INFO] [io.quarkus.deployment.pkg.steps.NativeImageBuildRunner] /opt/graalvm-ce-java11-22.3.0/bin/native-image -J-Djava.util.logging.manager=org.jboss.logmanager.LogManager -J-Dsun.nio.ch.maxUpdateArraySize=100 -J-Dlogging.initial-configurator.min-level=500 -J-Dio.netty.leakDetection.level=DISABLED -J-Dio.netty.allocator.maxOrder=3 -J-Dvertx.logger-delegate-factory-class-name=io.quarkus.vertx.core.runtime.VertxLogDelegateFactory -J-Dvertx.disableDnsResolver=true -J-Duser.language=en -J-Duser.country=US -J-Dfile.encoding=UTF-8 --features=io.quarkus.runner.Feature,io.quarkus.runtime.graal.ResourcesFeature,io.quarkus.runtime.graal.DisableLoggingFeature -J--add-exports=java.security.jgss/sun.security.krb5=ALL-UNNAMED -J--add-opens=java.base/java.text=ALL-UNNAMED -J--add-opens=java.base/java.io=ALL-UNNAMED -J--add-opens=java.base/java.lang.invoke=ALL-UNNAMED -J--add-opens=java.base/java.util=ALL-UNNAMED -H:+CollectImageBuildStatistics -H:ImageBuildStatisticsFile=ldap-arch-api-1.0.0-runner-timing-stats.json -H:BuildOutputJSONFile=ldap-arch-api-1.0.0-runner-build-output-stats.json -J-Djavax.net.ssl.trustStore=./target/cacerts -J-Djavax.net.ssl.trustStorePassword=changeit -H:InitialCollectionPolicy=com.oracle.svm.core.genscavenge.CollectionPolicy\$BySpaceAndTime -H:+AllowFoldMethods -J-Djava.awt.headless=true --no-fallback --link-at-build-time -H:+ReportExceptionStackTraces -H:-AddAllCharsets --enable-url-protocols=http,https -H:NativeLinkerOption=-no-pie -H:-UseServiceLoaderFeature -H:+StackTrace -J--add-exports=org.graalvm.sdk/org.graalvm.nativeimage.impl=ALL-UNNAMED -J--add-exports=org.graalvm.nativeimage.builder/com.oracle.svm.core.jdk=ALL-UNNAMED ldap-arch-api-1.0.0-runner -jar ldap-arch-api-1.0.0-runner.jar
========================================================================================================================
GraalVM Native Image: Generating 'ldap-arch-api-1.0.0-runner' (executable)...
========================================================================================================================
[1/7] Initializing... (11.2s @ 0.43GB)
Version info: 'GraalVM 22.3.0 Java 11 CE'
Java version info: '11.0.17+8-jvmci-22.3-b08'
C compiler: gcc (linux, x86_64, 9.4.0)
Garbage collector: Serial GC
4 user-specific feature(s)
- io.quarkus.runner.Feature: Auto-generated class by Quarkus from the existing extensions
- io.quarkus.runtime.graal.DisableLoggingFeature: Disables INFO logging during the analysis phase for the [org.jboss.threads] categories
- io.quarkus.runtime.graal.ResourcesFeature: Register each line in META-INF/quarkus-native-resources.txt as a resource on Substrate VM
- org.graalvm.home.HomeFinderFeature: Finds GraalVM paths and its version number
[2/7] Performing analysis... [WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by io.netty.util.internal.ReflectionUtil (file:/home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0-native-image-source-jar/lib/io.netty.netty-common-4.1.82.Final.jar) to constructor java.nio.DirectByteBuffer(long,int)
WARNING: Please consider reporting this to the maintainers of io.netty.util.internal.ReflectionUtil
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
*********] (37.5s @ 1.78GB)
12,049 (89.75%) of 13,425 classes reachable
18,112 (61.61%) of 29,398 fields reachable
61,126 (56.87%) of 107,492 methods reachable
443 classes, 602 fields, and 1,769 methods registered for reflection
69 classes, 88 fields, and 55 methods registered for JNI access
5 native libraries: dl, pthread, rt, stdc++, z
[3/7] Building universe... (5.0s @ 4.00GB)
[4/7] Parsing methods... [**] (3.6s @ 3.47GB)
[5/7] Inlining methods... [***] (1.8s @ 1.06GB)
[6/7] Compiling methods... [****] (19.6s @ 3.82GB)
[7/7] Creating image... (5.4s @ 1.57GB)
22.51MB (48.78%) for code area: 38,898 compilation units
23.17MB (50.21%) for image heap: 281,349 objects and 9 resources
478.29KB ( 1.01%) for other data
46.14MB in total
------------------------------------------------------------------------------------------------------------------------
Top 10 packages in code area: Top 10 object types in image heap:
1.57MB sun.security.ssl 4.97MB byte[] for code metadata
1.12MB java.lang.invoke 2.86MB java.lang.Class
963.10KB java.util 2.59MB java.lang.String
677.12KB com.sun.crypto.provider 2.25MB byte[] for general heap data
470.16KB sun.security.x509 2.14MB byte[] for java.lang.String
427.96KB java.util.concurrent 1.10MB com.oracle.svm.core.hub.DynamicHubCompanion
408.62KB java.lang 618.51KB byte[] for reflection metadata
394.79KB io.netty.buffer 570.42KB java.util.HashMap$Node
376.69KB java.io 511.76KB java.lang.String[]
346.93KB com.fasterxml.jackson.databind.deser.std 427.11KB c.o.svm.core.hub.DynamicHub$ReflectionMetadata
15.56MB for 470 more packages 4.20MB for 2952 more object types
------------------------------------------------------------------------------------------------------------------------
5.9s (6.3% of total time) in 33 GCs | Peak RSS: 6.34GB | CPU load: 7.85
------------------------------------------------------------------------------------------------------------------------
Produced artifacts:
/home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0-native-image-source-jar/ldap-arch-api-1.0.0-runner (executable)
/home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0-native-image-source-jar/ldap-arch-api-1.0.0-runner-build-output-stats.json (json)
/home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0-native-image-source-jar/ldap-arch-api-1.0.0-runner-timing-stats.json (raw)
/home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0-native-image-source-jar/ldap-arch-api-1.0.0-runner.build_artifacts.txt (txt)
========================================================================================================================
Finished generating 'ldap-arch-api-1.0.0-runner' in 1m 31s.
[INFO] [io.quarkus.deployment.pkg.steps.NativeImageBuildRunner] objcopy --strip-debug ldap-arch-api-1.0.0-runner
[INFO] [io.quarkus.deployment.QuarkusAugmentor] Quarkus augmentation completed in 95974ms
[INFO]
[INFO] --- maven-failsafe-plugin:3.0.0-M7:integration-test (default) @ ldap-arch-api ---
[INFO]
[INFO] --- maven-failsafe-plugin:3.0.0-M7:verify (default) @ ldap-arch-api ---
[INFO]
[INFO] --- maven-install-plugin:2.4:install (default-install) @ ldap-arch-api ---
[INFO] Installing /home/peter/Documents/Quarkus/ldap-arch-api/target/ldap-arch-api-1.0.0.jar to /home/peter/.m2/repository/com/lianhwa/ldap/ldap-arch-api/1.0.0/ldap-arch-api-1.0.0.jar
[INFO] Installing /home/peter/Documents/Quarkus/ldap-arch-api/pom.xml to /home/peter/.m2/repository/com/lianhwa/ldap/ldap-arch-api/1.0.0/ldap-arch-api-1.0.0.pom
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 01:39 min
[INFO] Finished at: 2022-11-19T06:36:31+08:00
[INFO] ------------------------------------------------------------------------ |
Beta Was this translation helpful? Give feedback.
-
|
I encountered the same error with a Quarkus native application loading data from LDAP, I was able to find a workaround for the issue by registering the javax.net.ssl.SSLSocketFactory class for reflection: |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
I follow security-ldap and native-and-ssl to set it up.
Executed successfully in quarkus dev mode.
application.properties
Execution failed in native executables.
error message
java.lang.RuntimeException: org.wildfly.security.auth.server.RealmUnavailableException: ELY01125: Ldap-backed realm failed to obtain context at io.quarkus.elytron.security.runtime.ElytronPasswordIdentityProvider$1.get(ElytronPasswordIdentityProvider.java:62) at io.quarkus.elytron.security.runtime.ElytronPasswordIdentityProvider$1.get(ElytronPasswordIdentityProvider.java:43) at io.quarkus.security.runtime.QuarkusIdentityProviderManagerImpl$1$1$1$1.run(QuarkusIdentityProviderManagerImpl.java:58) at io.quarkus.vertx.core.runtime.VertxCoreRecorder$14.runWith(VertxCoreRecorder.java:564) at org.jboss.threads.EnhancedQueueExecutor$Task.run(EnhancedQueueExecutor.java:2449) at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1478) at org.jboss.threads.DelegatingRunnable.run(DelegatingRunnable.java:29) at org.jboss.threads.ThreadLocalResettingRunnable.run(ThreadLocalResettingRunnable.java:29) at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) at java.base@11.0.17/java.lang.Thread.run(Thread.java:829) at org.graalvm.nativeimage.builder/com.oracle.svm.core.thread.PlatformThreads.threadStartRoutine(PlatformThreads.java:775) at org.graalvm.nativeimage.builder/com.oracle.svm.core.posix.thread.PosixPlatformThreads.pthreadStartRoutine(PosixPlatformThreads.java:203) Caused by: org.wildfly.security.auth.server.RealmUnavailableException: ELY01125: Ldap-backed realm failed to obtain context at org.wildfly.security.auth.realm.ldap.LdapSecurityRealm.obtainContext(LdapSecurityRealm.java:223) at org.wildfly.security.auth.realm.ldap.LdapSecurityRealm.access$600(LdapSecurityRealm.java:104) at org.wildfly.security.auth.realm.ldap.LdapSecurityRealm$LdapRealmIdentity.verifyEvidence(LdapSecurityRealm.java:607) at org.wildfly.security.auth.server.ServerAuthenticationContext$NameAssignedState.verifyEvidence(ServerAuthenticationContext.java:2078) at org.wildfly.security.auth.server.ServerAuthenticationContext.verifyEvidence(ServerAuthenticationContext.java:767) at org.wildfly.security.auth.server.SecurityDomain.authenticate(SecurityDomain.java:315) at org.wildfly.security.auth.server.SecurityDomain.authenticate(SecurityDomain.java:289) at io.quarkus.elytron.security.runtime.ElytronPasswordIdentityProvider$1.get(ElytronPasswordIdentityProvider.java:48) ... 11 more Caused by: javax.naming.CommunicationException: xxx.xxx.com.tw:636 [Root exception is java.lang.NoSuchMethodException: javax.net.ssl.SSLSocketFactory.getDefault()] at java.naming@11.0.17/com.sun.jndi.ldap.Connection.<init>(Connection.java:252) at java.naming@11.0.17/com.sun.jndi.ldap.LdapClient.<init>(LdapClient.java:137) at java.naming@11.0.17/com.sun.jndi.ldap.LdapClient.getInstance(LdapClient.java:1616) at java.naming@11.0.17/com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2847) at java.naming@11.0.17/com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:348) at java.naming@11.0.17/com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxFromUrl(LdapCtxFactory.java:262) at java.naming@11.0.17/com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:226) at java.naming@11.0.17/com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:280) at java.naming@11.0.17/com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:185) at java.naming@11.0.17/com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:115) at java.naming@11.0.17/javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:730) at java.naming@11.0.17/javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:305) at java.naming@11.0.17/javax.naming.InitialContext.init(InitialContext.java:236) at java.naming@11.0.17/javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:154) at io.quarkus.elytron.security.ldap.QuarkusDirContextFactory.createDirContext(QuarkusDirContextFactory.java:111) at io.quarkus.elytron.security.ldap.QuarkusDirContextFactory.obtainDirContext(QuarkusDirContextFactory.java:51) at io.quarkus.elytron.security.ldap.LdapRecorder.lambda$createDirContextSupplier$0(LdapRecorder.java:60) at org.wildfly.security.auth.realm.ldap.LdapSecurityRealm.obtainContext(LdapSecurityRealm.java:211) ... 18 more Caused by: java.lang.NoSuchMethodException: javax.net.ssl.SSLSocketFactory.getDefault() at java.base@11.0.17/java.lang.Class.getMethod(DynamicHub.java:2108) at java.naming@11.0.17/com.sun.jndi.ldap.Connection.createSocket(Connection.java:292) at java.naming@11.0.17/com.sun.jndi.ldap.Connection.<init>(Connection.java:231) ... 35 moreHow can I solve this problem please?
Beta Was this translation helpful? Give feedback.
All reactions