0001736: openssl with null password

Viewing Issue Advanced Details [ Jump to Notes ]

[ View Simple ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0001736

[Resin]

minor

always

05-15-07 09:38

06-06-07 10:57

Reporter

ferg

View Status

public

Assigned To

ferg

Priority

normal

Resolution

fixed

Platform

Status

closed

Projection

none

OS Version

ETA

none

Fixed in Version

3.1.2

Product Version

3.0.21

Product Build

Summary

0001736: openssl with null password

Description

(rep by Brian Woods)

We're having trouble with our wildcard certs and resin 3.0.21. When
we install them 1 of 2 things happens:

1. If we provide no password in xml (the certs are passwordless) we
get a log statement saying that we need to provide a password

2. If we put in an empty password <password></password> we get this error:

[2007/05/10 23:27:26.508] com.caucho.config.ConfigException: OpenSSL
can't open key file '/etc/resin/ssl/foo-wildcard.crt' or the password
does not match.
[2007/05/10 23:27:26.508] at
com.caucho.vfs.OpenSSLFactory.nativeInit(Native Method)
[2007/05/10 23:27:26.508] at
com.caucho.vfs.OpenSSLFactory.create(OpenSSLFactory.java:380)
[2007/05/10 23:27:26.508] at
com.caucho.server.port.Port.bind(Port.java:667)
[2007/05/10 23:27:26.508] at
com.caucho.server.resin.ServletServer.bindPorts(ServletServer.java:1015)
[2007/05/10 23:27:26.508] at
com.caucho.server.resin.ServletServer.start(ServletServer.java:961)
[2007/05/10 23:27:26.508] at
com.caucho.server.deploy.DeployController.startImpl(DeployController.java:621)
[2007/05/10 23:27:26.508] at
com.caucho.server.deploy.AbstractDeployControllerStrategy.start(AbstractDeployControllerStrategy.java:56)
[2007/05/10 23:27:26.508] at
com.caucho.server.deploy.DeployController.start(DeployController.java:517)
[2007/05/10 23:27:26.508] at
com.caucho.server.resin.ResinServer.start(ResinServer.java:546)
[2007/05/10 23:27:26.508] at
com.caucho.server.resin.Resin.init(Resin.java)
[2007/05/10 23:27:26.508] at
com.caucho.server.resin.Resin.main(Resin.java:625)

We've tried it with our signed cert and with our signed cert added to
our cert (cat'ed together). Both times we get the same result.

I've verified our key and cert using openssl. Oddly enough when I
self sign our cert it works nicely.

Steps To Reproduce

Additional Information

Attached Files

Relationships

There are no notes attached to this issue.

Issue History
Date Modified	Username	Field	Change
05-15-07 09:38	ferg	New Issue
06-06-07 10:57	ferg	Assigned To	=> ferg
06-06-07 10:57	ferg	Status	new => closed
06-06-07 10:57	ferg	Resolution	open => fixed
06-06-07 10:57	ferg	Fixed in Version	=> 3.1.2

Mantis 1.0.0rc3[^]

26 total queries executed.
24 unique queries executed.