Eclipse Community Forums: Eclipse Scout » [neon] ScurityUtility, problem when deploying on IBM Websphere

Help

Home

Home » Eclipse Projects » Eclipse Scout » [neon] ScurityUtility, problem when deploying on IBM Websphere

Show: Today's Messages :: Show Polls :: Message Navigator

[neon] ScurityUtility, problem when deploying on IBM Websphere [message #1725906]

Tue, 08 March 2016 13:09

Rene Eigenheer

Messages: 109
Registered: July 2009

Senior Member

We migrated the first component of our application from Mars to Neon. Most parts run really nicely Wink

We've tested the application with the generated Jetty Launchers and with Tomcat (as Maven Plugin).
As our target environment is IBM Websphere, we build an ear and deployed i to Websphere which runs with an IBM JDK.

On this platform the application the application fails with the following error:

Caused by: java.security.NoSuchProviderException: no such provider: SunEC
        at sun.security.jca.GetInstance.getService(GetInstance.java:96) ~[na:1.7.0]
        at sun.security.jca.GetInstance.getInstance(GetInstance.java:219) ~[na:1.7.0]
        at java.security.KeyFactory.getInstance(KeyFactory.java:223) ~[na:1.7.0]
        at org.eclipse.scout.rt.platform.security.SecurityUtility.createSignature(SecurityUtility.java:411) ~[org.eclipse.scout.rt.platform-5.2.0.M5.jar:5.2.0.M5]
        ... 25 common frames omitted

Apparently the class org.eclipse.scout.rt.platform.security.SecurityUtility is the problem as this class uses Oracle/Sun implmenentations which aren't available in a Non-Oracle-JRE.
As this class doesn't use the Platform Bean mechanism we can't even overlay this class with another implementation.

Could you pls instruct how we can proceed to get an Websphere deployable EAR?

Report message to a moderator

Re: [neon] ScurityUtility, problem when deploying on IBM Websphere [message #1725947 is a reply to message #1725906]

Tue, 08 March 2016 15:26

Matthias Villiger

Messages: 232
Registered: September 2011

Senior Member

Hi René

You have several options:

You can install the missing sun provider into your IBM JRE.
If this is not possible or not allowed you can also replace the DefaultAuthToken class (using @Replace) and override the sign() and verify() methods to use your own algorithms.

Does this help?

Matthias

Report message to a moderator

Re: [neon] ScurityUtility, problem when deploying on IBM Websphere [message #1726151 is a reply to message #1725947]

Thu, 10 March 2016 07:58

Rene Eigenheer

Messages: 109
Registered: July 2009

Senior Member

Hi Matthias

Just adding sunec.jar didn't solve the problem, I will continue investigating.

But I found another WebSphere problem:

java.lang.IllegalArgumentException: JAR wsjar:file:/xxxx/yyyy.war/WEB-INF/lib/org.eclipse.scout.rt.ui.html.scriptprocessor-5.2.0.M5.jar!/private-libs/yuicompressor.jar could not be extracted to temp directory
        at org.eclipse.scout.rt.ui.html.scriptprocessor.internal.loader.SandboxClassLoaderBuilder.unwrapNestedJar(SandboxClassLoaderBuilder.java:142) ~[org.eclipse.scout.rt.ui.html.scriptprocessor-5.2.0.M5.jar:5.2.0.M5]
        at org.eclipse.scout.rt.ui.html.scriptprocessor.internal.loader.SandboxClassLoaderBuilder.addLocalJar(SandboxClassLoaderBuilder.java:63) ~[org.eclipse.scout.rt.ui.html.scriptprocessor-5.2.0.M5.jar:5.2.0.M5]
        at org.eclipse.scout.rt.ui.html.scriptprocessor.ScriptProcessor.<init>(ScriptProcessor.java:35) ~[org.eclipse.scout.rt.ui.html.scriptprocessor-5.2.0.M5.jar:5.2.0.M5]
....
Caused by: java.io.FileNotFoundException: /opt/spool/tmpdir/zzzzzzz/yuicompressor-107629F8CE1BE141A48F34DC0D7D9B9039B6315C.jar (No such file or directory)
        at java.io.FileOutputStream.<init>(FileOutputStream.java:233) ~[na:1.7.0]
        at java.io.FileOutputStream.<init>(FileOutputStream.java:183) ~[na:1.7.0]
        at org.eclipse.scout.rt.ui.html.scriptprocessor.internal.loader.SandboxClassLoaderBuilder.writeContent(SandboxClassLoaderBuilder.java:164) ~[org.eclipse.scout.rt.ui.html.scriptprocessor-5.2.0.M5.jar:5.2.0.M5]
        at org.eclipse.scout.rt.ui.html.scriptprocessor.internal.loader.SandboxClassLoaderBuilder.unwrapNestedJar(SandboxClassLoaderBuilder.java:133) ~[org.eclipse.scout.rt.ui.html.scriptprocessor-5.2.0.M5.jar:5.2.0.M5]
        ... 50 common frames omitted

Do you have a hint for this one?

thanks
Rene

Report message to a moderator

Re: [neon] ScurityUtility, problem when deploying on IBM Websphere [message #1726176 is a reply to message #1726151]

Thu, 10 March 2016 10:42

Matthias Villiger

Messages: 232
Registered: September 2011

Senior Member

Hi René

You may also need to add the providers to the config file 'IBM_JRE/lib/security/java.security' (e.g. under /opt/IBM/WebSphere/AppServer/java/jre/lib/security/)

...
security.provider.4=com.sun.crypto.provider.SunJCE
security.provider.5=sun.security.provider.Sun
security.provider.6=sun.security.rsa.SunRsaSign
security.provider.7=sun.security.jgss.SunProvider
...

Please note that the order of the providers (the numeric key part) defines in which order the providers are searched for algorithms if no specific provider is requested. So depending on your existing environment and applications you may need to add the new providers to the end so that existing code is not affected.

You can refer to the java.security file of an Oracle JRE to get a list of available providers.

The other exception seems like a bug in the scout html ui. It should be fixed in M6.

Report message to a moderator

Re: [neon] ScurityUtility, problem when deploying on IBM Websphere [message #1726539 is a reply to message #1726176]

Mon, 14 March 2016 14:08

Rene Eigenheer

Messages: 109
Registered: July 2009

Senior Member

Hi Matthias

I didn't manage to fix it using the Oracle/Sun libraries, which could be normal [1]. But creating my custom AuthToken as you mentioned and using bouncycastle seems to work. I couldn't test in on WebSphere as the second mentioned problem (yuicompressor) still exists.
I will try again end of week when M6 should be available

[1] http://armoredbarista.blogspot.ch/2013/10/how-to-use-ecc-with-openjdk.html

[Updated on: Mon, 14 March 2016 15:01]

Report message to a moderator

Re: [neon] ScurityUtility, problem when deploying on IBM Websphere [message #1726543 is a reply to message #1726539]

Mon, 14 March 2016 14:40

Jeremie Bresson

Messages: 1252
Registered: October 2011

Senior Member

René Eigenheer wrote on Mon, 14 March 2016 15:08

I will try again end of week when M6 should be available

M6 will be shipped at the end of NEXT week (Friday, March 25).
See: https://wiki.eclipse.org/Neon/Simultaneous_Release_Plan#Schedule

Report message to a moderator

Re: [neon] ScurityUtility, problem when deploying on IBM Websphere [message #1726552 is a reply to message #1726543]

Mon, 14 March 2016 15:20

Rene Eigenheer

Messages: 109
Registered: July 2009

Senior Member

thanks Jeremie. I still have the origin schedule in my agenda Shocked

is a nightly build available in which the yuicompress problem is already fixed?

Report message to a moderator

Re: [neon] ScurityUtility, problem when deploying on IBM Websphere [message #1726589 is a reply to message #1726552]

Mon, 14 March 2016 20:55

Jeremie Bresson

Messages: 1252
Registered: October 2011

Senior Member

My guess is that this is something BSI can offer as part of the Scout professional support (we are already doing a lot of intermediate Neon releases for BSI customers. Please contact Matthias Zimmerman per Email).

Or: everything is open-source and you can build it yourself. Since Neon, Scout RT has a maven build "by the book". Building it is really easy and it should work on your machine.
* Checkout the Scout RT repo.
* Run "mvn clean install" at the root of the repository.

Report message to a moderator

Re: [neon] ScurityUtility, problem when deploying on IBM Websphere [message #1726675 is a reply to message #1726552]

Tue, 15 March 2016 15:24

Matthias Villiger

Messages: 232
Registered: September 2011

Senior Member

Hi René

The SDK nightly P2 updatesite can be found here.

For the Scout RT you can find the sources here and build it locally as Jérémie explained.
The commit that hopefully fixes your issue is here.

It would be nice if you could verify if this fixes your issue.

Thanks!
Matthias

Report message to a moderator

Previous Topic:	[Neon] NlsUtility.getDefaultLocale() gone
Next Topic:	[neon] AbstractCustomField

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Apr 24 23:38:31 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter