Gerrit and Sonar don't play well together in Tomcat, no such provider: BC

[provegard]

Hi,

I have deployed Gerrit in Tomcat 7.0.12. When I also deploy Sonar
(www.sonarsource.org, tested with versions 2.6 and 2.7), I can no
longer connect to Gerrit's SSH server.

On the client side:

$ git fetch -v
no hostkey alg
fatal: The remote end hung up unexpectedly

In the Tomcat logs (catalina.out):

[2011-05-11 06:37:21,165] INFO
org.apache.sshd.common.keyprovider.FileKeyPairProvider : Unable to
read key /.../gerrit/etc/ssh_host_rsa_key:
org.bouncycastle.openssl.PEMException: problem creating RSA private
key: java.security.NoSuchProviderException: no such provider: BC
[2011-05-11 06:37:21,181] INFO
org.apache.sshd.common.keyprovider.FileKeyPairProvider : Unable to
read key /.../gerrit/etc/ssh_host_dsa_key:
org.bouncycastle.openssl.PEMException: problem creating DSA private
key: java.security.NoSuchProviderException: no such provider: BC
[2011-05-11 06:37:21,298] WARN
org.apache.sshd.server.session.ServerSession : Exception caught
java.lang.IllegalStateException: Unable to negociate key exchange for
item 1
at
org.apache.sshd.common.session.AbstractSession.negociate(AbstractSession.java:
886)
at
org.apache.sshd.server.session.ServerSession.handleMessage(ServerSession.java:
151)
at
org.apache.sshd.common.session.AbstractSession.decode(AbstractSession.java:
522)
at
org.apache.sshd.common.session.AbstractSession.messageReceived(AbstractSession.java:
225)
at
org.apache.sshd.common.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:
58)
at org.apache.mina.core.filterchain.DefaultIoFilterChain
$TailFilter.messageReceived(DefaultIoFilterChain.java:716)
at
org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:
434)
at org.apache.mina.core.filterchain.DefaultIoFilterChain.access
$1200(DefaultIoFilterChain.java:46)
at org.apache.mina.core.filterchain.DefaultIoFilterChain
$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:796)
at
org.apache.mina.core.filterchain.IoFilterAdapter.messageReceived(IoFilterAdapter.java:
119)
at
org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:
434)
at
org.apache.mina.core.filterchain.DefaultIoFilterChain.fireMessageReceived(DefaultIoFilterChain.java:
426)
at
org.apache.mina.core.polling.AbstractPollingIoProcessor.read(AbstractPollingIoProcessor.java:
692)
at
org.apache.mina.core.polling.AbstractPollingIoProcessor.process(AbstractPollingIoProcessor.java:
645)
at
org.apache.mina.core.polling.AbstractPollingIoProcessor.process(AbstractPollingIoProcessor.java:
634)
at
org.apache.mina.core.polling.AbstractPollingIoProcessor.access
$400(AbstractPollingIoProcessor.java:66)
at org.apache.mina.core.polling.AbstractPollingIoProcessor
$Processor.run(AbstractPollingIoProcessor.java:1078)
at
org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:
64)
at java.util.concurrent.ThreadPoolExecutor
$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor
$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)

Any thoughts?

Best regards,
Per Rovegård

[Shawn Pearce]

On Tue, May 10, 2011 at 21:41, provegard <per.ro...@gmail.com> wrote:
> I have deployed Gerrit in Tomcat 7.0.12. When I also deploy Sonar
> (www.sonarsource.org, tested with versions 2.6 and 2.7), I can no
> longer connect to Gerrit's SSH server.

...

> In the Tomcat logs (catalina.out):
>
> [2011-05-11 06:37:21,165] INFO
> org.apache.sshd.common.keyprovider.FileKeyPairProvider : Unable to
> read key /.../gerrit/etc/ssh_host_rsa_key:
> org.bouncycastle.openssl.PEMException: problem creating RSA private
> key: java.security.NoSuchProviderException: no such provider: BC

...
> Any thoughts?

Sounds like Sonar managed to prevent or remove the registration for
the BC security provider. Not much we can do about that, it may have
to do with the startup order of the web applications in the container.

[Per Rovegård]

Ok, I'll ask on the Sonar mailing list why it does that.

Thanks,
Per