Error during IGA Start - OpenSSL was not found on the java.library.path:

Hello, community!

I've installed the IGA 3.7.3 in a RedHat 8.7 server.

The installation log does not show any error. But once I try to start the identity_tomcat, I can see that there is an error on catalina.

" [INFO] 2023-01-27 15:52:19.543 [org.apache.catalina.core.AprLifecycleListener] The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib]
[INFO] 2023-01-27 15:52:19.985 [org.apache.coyote.http11.Http11NioProtocol] Initializing ProtocolHandler ["http-nio-8080"]
[INFO] 2023-01-27 15:52:20.012 [org.apache.coyote.http11.Http11NioProtocol] Initializing ProtocolHandler ["https-jsse-nio-8543"]
[SEVERE] 2023-01-27 15:52:20.387 [org.apache.catalina.util.LifecycleBase] Failed to initialize component [Connector[HTTP/1.1-8543]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed"

Due this, the application is now working. Not even the port 8543( the one that application should run) is started.

Please find below the full catalina file.

[INFO] 2023-01-27 15:52:19.534 [org.apache.catalina.startup.VersionLoggerListener] Server version name: Apache Tomcat/9.0.69
[INFO] 2023-01-27 15:52:19.535 [org.apache.catalina.startup.VersionLoggerListener] Server built: Nov 9 2022 18:43:47 UTC
[INFO] 2023-01-27 15:52:19.535 [org.apache.catalina.startup.VersionLoggerListener] Server version number: 9.0.69.0
[INFO] 2023-01-27 15:52:19.536 [org.apache.catalina.startup.VersionLoggerListener] OS Name: Linux
[INFO] 2023-01-27 15:52:19.536 [org.apache.catalina.startup.VersionLoggerListener] OS Version: 4.18.0-425.10.1.el8_7.x86_64
[INFO] 2023-01-27 15:52:19.536 [org.apache.catalina.startup.VersionLoggerListener] Architecture: amd64
[INFO] 2023-01-27 15:52:19.536 [org.apache.catalina.startup.VersionLoggerListener] Java Home: /opt/netiq/idm/apps/jdk/jre
[INFO] 2023-01-27 15:52:19.536 [org.apache.catalina.startup.VersionLoggerListener] JVM Version: 1.8.0_352-b08
[INFO] 2023-01-27 15:52:19.536 [org.apache.catalina.startup.VersionLoggerListener] JVM Vendor: Azul Systems, Inc.
[INFO] 2023-01-27 15:52:19.536 [org.apache.catalina.startup.VersionLoggerListener] CATALINA_BASE: /opt/netiq/idm/apps/tomcat
[INFO] 2023-01-27 15:52:19.536 [org.apache.catalina.startup.VersionLoggerListener] CATALINA_HOME: /opt/netiq/idm/apps/tomcat
[INFO] 2023-01-27 15:52:19.538 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.util.logging.config.file=/opt/netiq/idm/apps/tomcat/conf/logging.properties
[INFO] 2023-01-27 15:52:19.538 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
[INFO] 2023-01-27 15:52:19.538 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Xms1024m
[INFO] 2023-01-27 15:52:19.538 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Xmx1024m
[INFO] 2023-01-27 15:52:19.538 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djdk.tls.ephemeralDHKeySize=2048
[INFO] 2023-01-27 15:52:19.538 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.ism.config=/opt/netiq/idm/apps/tomcat/conf/ism-configuration.properties
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dinternal.osp.framework.ext-context-file=/opt/netiq/idm/apps/osp/lib/osp-conf-edir.jar
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.idm.osp.logging.level=WARN
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.idm.osp.client.host=iga-hml.smiles.com.br
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.idm.osp.audit.enabled=false
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.idm.osp.logging.file.dir=/opt/netiq/idm/apps/tomcat/logs
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.awt.headless=true
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.ism.config.is.jndi.env=true
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dnovell.logging.config.dir=/opt/netiq/idm/apps/tomcat/conf
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dextend.local.config.dir=/opt/netiq/idm/apps/tomcat/conf
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dlog4j.configuration=file:///opt/netiq/idm/apps/tomcat/conf/log4j.properties
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.logging.internalLoggingType=JDK
[INFO] 2023-01-27 15:52:19.539 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dinternal.atlaslite.jcce.xml.w3c.XMLUtil.suppressSecurityWarning=true
[INFO] 2023-01-27 15:52:19.540 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.novell.afw.wf.engine-id=local
[INFO] 2023-01-27 15:52:19.540 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.microfocus.workflow.logging.level=INFO
[INFO] 2023-01-27 15:52:19.540 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dignore.endorsed.dirs=
[INFO] 2023-01-27 15:52:19.540 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcatalina.base=/opt/netiq/idm/apps/tomcat
[INFO] 2023-01-27 15:52:19.540 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcatalina.home=/opt/netiq/idm/apps/tomcat
[INFO] 2023-01-27 15:52:19.540 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.io.tmpdir=/opt/netiq/idm/apps/tomcat/temp
[INFO] 2023-01-27 15:52:19.543 [org.apache.catalina.core.AprLifecycleListener] The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib]
[INFO] 2023-01-27 15:52:19.985 [org.apache.coyote.http11.Http11NioProtocol] Initializing ProtocolHandler ["http-nio-8080"]
[INFO] 2023-01-27 15:52:20.012 [org.apache.coyote.http11.Http11NioProtocol] Initializing ProtocolHandler ["https-jsse-nio-8543"]
[SEVERE] 2023-01-27 15:52:20.387 [org.apache.catalina.util.LifecycleBase] Failed to initialize component [Connector[HTTP/1.1-8543]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1050)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at org.apache.catalina.core.StandardService.initInternal(StandardService.java:554)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:1045)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at org.apache.catalina.startup.Catalina.load(Catalina.java:724)
at org.apache.catalina.startup.Catalina.load(Catalina.java:746)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:305)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:475)
Caused by: java.lang.IllegalArgumentException: Alias name [null] does not identify a key entry
at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:107)
at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:71)
at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:235)
at org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup(AbstractEndpoint.java:1227)
at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1240)
at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:604)
at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:76)
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1047)
... 13 more
Caused by: java.io.IOException: Alias name [null] does not identify a key entry
at org.apache.tomcat.util.net.SSLUtilBase.getKeyManagers(SSLUtilBase.java:350)
at org.apache.tomcat.util.net.SSLUtilBase.createSSLContext(SSLUtilBase.java:247)
at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:105)
... 20 more

Does anyone had this issue before?

Thanks

Diego Moreira said:

Caused by: java.io.IOException: Alias name [null] does not identify a key entry

How does you tomcat/conf/server.xml look like?

It seems your Connector element for HTTPS doesn't point to a keystore containing your TLS certificate and private key.

Hello,
In addition, please confirm that the password for the keystore file is the same as the certificate. Tomcat is not able to read the certificate if the password is not the same for the keystore and certificate.

Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus

Hello, team.

The aliast was not there in server.xml.

I added and the error still there.

PFB the new Connector used in server.xml hiding the senstivie information :)

Below the log.

[root@ip-10-2-156-39 conf]# less /opt/netiq/idm/apps/tomcat/logs/catalina.2023-01-30.log
[WARNING] 2023-01-30 09:45:24.312 [org.apache.tomcat.util.digester.Digester] Match [Server/Service/Connector] failed to set property [alias] to [cn=*hided.com.br, ou=hided, o=hided, l=sao paulo, st=sp]
[INFO] 2023-01-30 09:45:24.364 [org.apache.catalina.startup.VersionLoggerListener] Server version name: Apache Tomcat/9.0.69
[INFO] 2023-01-30 09:45:24.364 [org.apache.catalina.startup.VersionLoggerListener] Server built: Nov 9 2022 18:43:47 UTC
[INFO] 2023-01-30 09:45:24.364 [org.apache.catalina.startup.VersionLoggerListener] Server version number: 9.0.69.0
[INFO] 2023-01-30 09:45:24.365 [org.apache.catalina.startup.VersionLoggerListener] OS Name: Linux
[INFO] 2023-01-30 09:45:24.365 [org.apache.catalina.startup.VersionLoggerListener] OS Version: 4.18.0-425.10.1.el8_7.x86_64
[INFO] 2023-01-30 09:45:24.365 [org.apache.catalina.startup.VersionLoggerListener] Architecture: amd64
[INFO] 2023-01-30 09:45:24.365 [org.apache.catalina.startup.VersionLoggerListener] Java Home: /opt/netiq/idm/apps/jdk/jre
[INFO] 2023-01-30 09:45:24.365 [org.apache.catalina.startup.VersionLoggerListener] JVM Version: 1.8.0_352-b08
[INFO] 2023-01-30 09:45:24.365 [org.apache.catalina.startup.VersionLoggerListener] JVM Vendor: Azul Systems, Inc.
[INFO] 2023-01-30 09:45:24.365 [org.apache.catalina.startup.VersionLoggerListener] CATALINA_BASE: /opt/netiq/idm/apps/tomcat
[INFO] 2023-01-30 09:45:24.365 [org.apache.catalina.startup.VersionLoggerListener] CATALINA_HOME: /opt/netiq/idm/apps/tomcat
[INFO] 2023-01-30 09:45:24.368 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.util.logging.config.file=/opt/netiq/idm/apps/tomcat/conf/logging.properties
[INFO] 2023-01-30 09:45:24.368 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
[INFO] 2023-01-30 09:45:24.368 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Xms1024m
[INFO] 2023-01-30 09:45:24.368 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Xmx1024m
[INFO] 2023-01-30 09:45:24.368 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djdk.tls.ephemeralDHKeySize=2048
[INFO] 2023-01-30 09:45:24.368 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
[INFO] 2023-01-30 09:45:24.368 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
[INFO] 2023-01-30 09:45:24.368 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.ism.config=/opt/netiq/idm/apps/tomcat/conf/ism-configuration.properties
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dinternal.osp.framework.ext-context-file=/opt/netiq/idm/apps/osp/lib/osp-conf-edir.jar
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.idm.osp.logging.level=WARN
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.idm.osp.client.host=iga-hml.smiles.com.br
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.idm.osp.audit.enabled=false
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.idm.osp.logging.file.dir=/opt/netiq/idm/apps/tomcat/logs
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.awt.headless=true
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.ism.config.is.jndi.env=true
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dnovell.logging.config.dir=/opt/netiq/idm/apps/tomcat/conf
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dextend.local.config.dir=/opt/netiq/idm/apps/tomcat/conf
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dlog4j.configuration=file:///opt/netiq/idm/apps/tomcat/conf/log4j.properties
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.netiq.logging.internalLoggingType=JDK
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dinternal.atlaslite.jcce.xml.w3c.XMLUtil.suppressSecurityWarning=true
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.novell.afw.wf.engine-id=local
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcom.microfocus.workflow.logging.level=INFO
[INFO] 2023-01-30 09:45:24.369 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dignore.endorsed.dirs=
[INFO] 2023-01-30 09:45:24.370 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcatalina.base=/opt/netiq/idm/apps/tomcat
[INFO] 2023-01-30 09:45:24.370 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Dcatalina.home=/opt/netiq/idm/apps/tomcat
[INFO] 2023-01-30 09:45:24.370 [org.apache.catalina.startup.VersionLoggerListener] Command line argument: -Djava.io.tmpdir=/opt/netiq/idm/apps/tomcat/temp
[INFO] 2023-01-30 09:45:24.372 [org.apache.catalina.core.AprLifecycleListener] The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib]
[INFO] 2023-01-30 09:45:24.794 [org.apache.coyote.http11.Http11NioProtocol] Initializing ProtocolHandler ["http-nio-8080"]
[INFO] 2023-01-30 09:45:24.820 [org.apache.coyote.http11.Http11NioProtocol] Initializing ProtocolHandler ["https-jsse-nio-8543"]
[SEVERE] 2023-01-30 09:45:25.204 [org.apache.catalina.util.LifecycleBase] Failed to initialize component [Connector[HTTP/1.1-8543]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1050)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)

If I try the same alias in Keytool, I can see the certificate correctly.

Thanks

Diego

Greetings,
When using HTTPS for Tomcat and ID Gov, it is Best Practice to utilize a separate keystore/truststore file for just Tomcat to utilize as compared to the two (2) that are being used by (a) OSP to do it's work (/opt/netiq/idm/apps/osp/) and (b) the one that ID Gov uses (/opt/netiq/idm/apps/tomcat/conf) for certain connections.

Utilizing the file "apps-truststore.pkcs12" for Tomcat HTTPS runtime is not Best Practice and should not be done.

Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.