[AAA-238] https configuration fails with blueprint errors

Wed, 1 Feb 2023 20:49:08 +0000

1. Enabling https using the official documentation results in errors
https://docs.opendaylight.org/en/latest/getting-started-guide/security_considerations.html#securing-restconf-using-https

2. The following errors are seen
a. Parse the secret file is prompting this error

------------------8<-----------------------------------------

12:11:08,920 | INFO  | features-3-thread-1 | FeaturesServiceImpl              | 16 - org.apache.karaf.features.core - 4.4.1 |   org.apache.aries.jmx.blueprint.core/1.2.0
2022-10-21T12:11:08,933 | INFO  | features-3-thread-1 | FeaturesServiceImpl              | 16 - org.apache.karaf.features.core - 4.4.1 |   org.apache.karaf.log.core/4.4.1
2022-10-21T12:11:08,942 | INFO  | features-3-thread-1 | CommandExtension                 | 127 - org.apache.karaf.shell.core - 4.4.1 | Registering commands for bundle org.apache.karaf.log.core/4.4.1
2022-10-21T12:11:08,945 | INFO  | features-3-thread-1 | FeaturesServiceImpl              | 16 - org.apache.karaf.features.core - 4.4.1 |   org.apache.aries.jmx.whiteboard/1.2.0
2022-10-21T12:11:08,956 | INFO  | features-3-thread-1 | FeaturesServiceImpl              | 16 - org.apache.karaf.features.core - 4.4.1 |   org.apache.karaf.scr.management/4.4.1
2022-10-21T12:11:08,959 | ERROR | paxweb-config-1-thread-1 (change controller) | Activator                        | 333 - org.ops4j.pax.web.pax-web-runtime - 8.0.6 | Unable to start Pax Web server: Get Key failed: Cannot read the array length because "password" is null
java.security.UnrecoverableKeyException: Get Key failed: Cannot read the array length because "password" is null
	at sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:450) ~[?:?]
	at sun.security.util.KeyStoreDelegator.engineGetKey(KeyStoreDelegator.java:91) ~[?:?]
	at java.security.KeyStore.getKey(KeyStore.java:1050) ~[?:?]
	at sun.security.ssl.SunX509KeyManagerImpl.<init>(SunX509KeyManagerImpl.java:141) ~[?:?]
	at sun.security.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:64) ~[?:?]
	at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:275) ~[?:?]
	at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1249) ~[?:?]
	at org.eclipse.jetty.util.ssl.SslContextFactory$Server.getKeyManagers(SslContextFactory.java:2364) ~[?:?]
	at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:373) ~[?:?]
	at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:244) ~[?:?]
	at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73) ~[?:?]
	at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169) ~[?:?]
	at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117) ~[?:?]
	at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:97) ~[?:?]
	at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73) ~[?:?]
	at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169) ~[?:?]
	at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117) ~[?:?]
	at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:323) ~[?:?]
	at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81) ~[?:?]
	at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234) ~[?:?]
	at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73) ~[?:?]
	at org.eclipse.jetty.server.Server.doStart(Server.java:401) ~[?:?]
	at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73) ~[?:?]
	at org.ops4j.pax.web.service.jetty.internal.JettyServerWrapper.start(JettyServerWrapper.java:623) ~[?:?]
	at org.ops4j.pax.web.service.jetty.internal.JettyServerController.start(JettyServerController.java:109) ~[?:?]
	at org.ops4j.pax.web.service.internal.Activator.performConfiguration(Activator.java:551) ~[?:?]
	at org.ops4j.pax.web.service.internal.Activator.updateController(Activator.java:441) ~[?:?]
	at org.ops4j.pax.web.service.internal.Activator.lambda$updateServerControllerFactory$1(Activator.java:347) ~[?:?]
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539) ~[?:?]
	at java.util.concurrent.FutureTask.run(FutureTask.java:264) ~[?:?]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304) ~[?:?]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) ~[?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) ~[?:?]
	at java.lang.Thread.run(Thread.java:833) ~[?:?]
Caused by: java.lang.NullPointerException: Cannot read the array length because "password" is null
	at sun.security.pkcs12.PKCS12KeyStore$RetryWithZero.run(PKCS12KeyStore.java:259) ~[?:?]
	at sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:361) ~[?:?]
	... 33 more
2022-10-21T12:11:08,966 | INFO  | features-3-thread-1 | ServiceComponentRuntimeMBeanImpl | 122 - org.apache.karaf.scr.management - 4.4.1 | Activating the Apache Karaf ServiceComponentRuntime MBean
2022-10-21T12:11:08,967 | INFO  | features-3-thread-1 | FeaturesServiceImpl              | 16 - org.apache.karaf.features.core - 4.4.1 |   org.apache.karaf.config.core/4.4.1
2022-10-21T12:11:08,986 | INFO  | features-3-thread-1 | CommandExtension                 | 127 - org.apache

3. The other failures are

10,983 | INFO  | Blueprint Extender: 3 | BlueprintContainerImpl           | 86 - org.apache.aries.blueprint.core - 1.10.3 | Blueprint bundle org.opendaylight.aaa.shiro/0.16.3 is waiting for dependencies [(objectClass=org.opendaylight.aaa.web.WebServer)]
2022-10-21T12:16:12,412 | ERROR | Blueprint Extender: 1 | BlueprintContainerImpl           | 86 - org.apache.aries.blueprint.core - 1.10.3 | Unable to start container for blueprint bundle org.opendaylight.netconf.restconf-nb/4.0.2 due to unresolved dependencies [(objectClass=org.opendaylight.aaa.web.WebContextSecurer), (objectClass=org.opendaylight.aaa.web.WebServer)]
java.util.concurrent.TimeoutException: null
	at org.apache.aries.blueprint.container.BlueprintContainerImpl$1.run(BlueprintContainerImpl.java:393) ~[?:?]
	at org.apache.aries.blueprint.utils.threading.impl.DiscardableRunnable.run(DiscardableRunnable.java:45) ~[?:?]
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539) ~[?:?]
	at java.util.concurrent.FutureTask.run(FutureTask.java:264) ~[?:?]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304) ~[?:?]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) ~[?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) ~[?:?]
	at java.lang.Thread.run(Thread.java:833) ~[?:?]
2022-10-21T12:16:12,413 | WARN  | Blueprint Event Dispatcher: 1 | BlueprintBundleTracker           | 188 - org.opendaylight.controller.blueprint - 6.0.2 | Blueprint container for bundle org.opendaylight.netconf.restconf-nb_4.0.2 [269] timed out waiting for dependencies - restarting it
2022-10-21T12:16:12,414 | INFO  | BlueprintContainerRestartService | BlueprintExtender                | 86 - org.apache.aries.blueprint.core - 1.10.3 | Destroying container for blueprint bundle org.opendaylight.netconf.restconf-nb/4.0.2
2022-10-21T12:16:12,421 | INFO  | BlueprintContainerRestartService | BlueprintContainerImpl           | 86 - org.apache.aries.blueprint.core - 1.10.3 | Blueprint bundle org.opendaylight.netconf.restconf-nb/4.0.2 is waiting for dependencies [(objectClass=org.opendaylight.aa

OpenDaylight JIRA

[AAA-238] https configuration fails with blueprint errors