Problems when attempting to use the SSL IIOP listener

249 views
Skip to first unread message

Eric Healey

unread,
Jul 11, 2018, 5:04:19 AM7/11/18
to Payara Forum
Hi,

I am attempting to communicate via SSL/TLS to the IIOP listener. I have a local Payara install, with an EAR file deployed containing a very simple EJB.
With this I can lookup and access the EJB using a simple stand-alone client app and the default 3700 IIOP listener.

I then attempted to do the same using SSL/TLS. I tried this in 2 main ways but get the same problem each time.

1) Creating a new self-signed certificate and install in the keystore/trustore using the instructions at https://blog.payara.fish/securing-payara-server-with-custom-ssl-certificate but amending the IIOP settings to use security rather than the HTTP settings.

2) Using a fresh install of Payara and using the pre-installed s1as certificate resulted in the same error.

In the above 2 examples I was tried against both the SSL IIOP listener(3820) and the orb-listener-1(3700), after setting both up to use security and entering the correct certificate nickname, again as per the blog.

The client code is setting the following properties..
The jndi.properties file is..


The error I get is..


I attempted the above using both Payara 5.181 and 5.182.

Any help appreciated as to what I may be missing/doing wrong.

Thanks and Regards.

Auto Generated Inline Image 1
Auto Generated Inline Image 2
Auto Generated Inline Image 3

Ondro Mihályi

unread,
Jul 11, 2018, 6:37:37 AM7/11/18
to Eric Healey, Payara Forum
Hi Eric,

Where do you get the exception from? Is it from the client or from the server? Can you please copy and paste the text instead of sending a screenshot?

Ondro

--
You received this message because you are subscribed to the Google Groups "Payara Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to payara-forum+unsubscribe@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/payara-forum/b71a3071-e10d-476f-b2a2-a8a8c87d3386%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Ondro Mihályi

unread,
Jul 11, 2018, 6:47:24 AM7/11/18
to Eric Healey, Payara Forum
Maybe try setting the port with a system property instead of in jndi.properties, as described here: https://github.com/javaee/glassfish/issues/11647#issuecomment-295976088

Ondro

Eric Healey

unread,
Jul 11, 2018, 8:57:00 AM7/11/18
to Payara Forum
Hi Ondro, thanks for the quick response.

I have tried putting the port as a system property and now getting a different error, please see below. Any ideas?

javax.naming.NamingException: Lookup failed for 'java:global/SimpleApplication/admin-service/AdminServiceImpl' in SerialContext[myEnv={org.omg.CORBA.ORBInitialPort=3820, java.naming.factory.initial=com.sun.enterprise.naming.SerialInitContextFactory, org.omg.CORBA.ORBInitialHost=localhost, java.naming.factory.url.pkgs=com.sun.enterprise.naming, java.naming.factory.state=com.sun.corba.ee.impl.presentation.rmi.JNDIStateFactoryImpl} [Root exception is javax.naming.NamingException: ejb ref resolution error for remote business interfaceeric.co.uk.ejbs.AdminService [Root exception is java.rmi.RemoteException: CORBA BAD_OPERATION 1330446421 No; nested exception is:
    org.omg.CORBA.BAD_OPERATION: FINE: 01210085: Exception in next method in ClientGroupManager  vmcid: OMG  minor code: 85  completed: No]]
    at com.sun.enterprise.naming.impl.SerialContext.lookup(SerialContext.java:491)
    at com.sun.enterprise.naming.impl.SerialContext.lookup(SerialContext.java:438)
    at javax.naming.InitialContext.lookup(InitialContext.java:417)
    at eric.co.uk.client.EJBClient.lookupAdminServicePayara(EJBClient.java:88)
    at eric.co.uk.client.EJBClient.main(EJBClient.java:27)
Caused by: javax.naming.NamingException: ejb ref resolution error for remote business interfaceeric.co.uk.ejbs.AdminService [Root exception is java.rmi.RemoteException: CORBA BAD_OPERATION 1330446421 No; nested exception is:
    org.omg.CORBA.BAD_OPERATION: FINE: 01210085: Exception in next method in ClientGroupManager  vmcid: OMG  minor code: 85  completed: No]
    at com.sun.ejb.EJBUtils.lookupRemote30BusinessObject(EJBUtils.java:433)
    at com.sun.ejb.containers.RemoteBusinessObjectFactory.getObjectInstance(RemoteBusinessObjectFactory.java:75)
    at javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:321)
    at com.sun.enterprise.naming.impl.SerialContext.getObjectInstance(SerialContext.java:527)
    at com.sun.enterprise.naming.impl.SerialContext.lookup(SerialContext.java:487)
    ... 4 more
Caused by: java.rmi.RemoteException: CORBA BAD_OPERATION 1330446421 No; nested exception is:
    org.omg.CORBA.BAD_OPERATION: FINE: 01210085: Exception in next method in ClientGroupManager  vmcid: OMG  minor code: 85  completed: No
    at com.sun.corba.ee.impl.javax.rmi.CORBA.Util.mapSystemException(Util.java:311)
    at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.privateInvoke(StubInvocationHandlerImpl.java:201)
    at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.invoke(StubInvocationHandlerImpl.java:140)
    at com.sun.corba.ee.impl.presentation.rmi.codegen.CodegenStubBase.invoke(CodegenStubBase.java:226)
    at com.sun.ejb.codegen._GenericEJBHome_Generated_DynamicStub.create(com/sun/ejb/codegen/_GenericEJBHome_Generated_DynamicStub.java)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at com.sun.ejb.EJBUtils.lookupRemote30BusinessObject(EJBUtils.java:422)
    ... 8 more
Caused by: org.omg.CORBA.BAD_OPERATION: FINE: 01210085: Exception in next method in ClientGroupManager  vmcid: OMG  minor code: 85  completed: No
    at com.sun.proxy.$Proxy19.exceptionInNext(Unknown Source)
    at com.sun.corba.ee.impl.folb.ClientGroupManager.next(ClientGroupManager.java:479)
    at com.sun.corba.ee.impl.transport.ContactInfoListIteratorImpl.next(ContactInfoListIteratorImpl.java:219)
    at com.sun.corba.ee.impl.transport.ContactInfoListIteratorImpl.next(ContactInfoListIteratorImpl.java:69)
    at com.sun.corba.ee.impl.protocol.ClientDelegateImpl.request(ClientDelegateImpl.java:207)
    at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.privateInvoke(StubInvocationHandlerImpl.java:182)
    ... 16 more
Caused by: java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
    at java.util.ArrayList.rangeCheck(ArrayList.java:657)
    at java.util.ArrayList.get(ArrayList.java:433)
    at com.sun.corba.ee.impl.folb.ClientGroupManager.next(ClientGroupManager.java:440)
    ... 20 more

Thanks and Regards
To unsubscribe from this group and stop receiving emails from it, send an email to payara-forum...@googlegroups.com.

Eric Healey

unread,
Jul 13, 2018, 4:27:27 AM7/13/18
to Payara Forum
Looks like this is a known issue and a fix (together with a system property setting) is in line for 5.183.
Tested on the pre-release version and IIOP SSL on a local Payara install worked (I did also require the port as a system property rather than in the jndi.properties as per your earlier note).

Thanks.
Reply all
Reply to author
Forward
0 new messages