EAP 6 "JBWEB003043: ... No Certificate file specified or invalid file format" when using native libraries

Solution Unverified - Updated -

Issue

  • https connector initialization failed when native=true. We have the following error when we try to use the native libraries :
ERROR [org.apache.coyote.http11] (MSC service thread 1-4) [] [] [] JBWEB003043: Error initializing endpoint: java.lang.Exception: No Certificate file specified or invalid file format
 at org.apache.tomcat.jni.SSLContext.setCertificate(Native Method) [jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]
 at org.apache.tomcat.util.net.AprEndpoint.init(AprEndpoint.java:649) [jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]
 at org.apache.coyote.http11.Http11AprProtocol.init(Http11AprProtocol.java:104) [jbossweb-7.2.2.Final-redhat-1.jar:7.2.2.Final-redhat-1]
.....
Caused by: LifecycleException:  JBWEB000023: Protocol handler initialization failed at org.apache.catalina.connector.Connector.init(Connector.java:986) 

The error appears only when we set native=true in the virtual host.
The configuration contains

<subsystem xmlns="urn:jboss:domain:web:1.4"
  default-virtual-server="default-host" native="true">
     <connector name="https" protocol="HTTP/1.1" scheme="https"
    socket-binding="https" secure="true">
    <ssl name="https" 
        password="${VAULT::Keystore::serverskeystore::MUYx........."
        certificate-key-file="${test.jboss.web.ssl.certificate-key-file}"
        verify-client="true" 
        ca-certificate-file="${test.jboss.web.ssl.certificate-ca-file}" ></ssl>
     </connector>
     <virtual-server name="default-host" enable-welcome-root="true">
    <alias name="localhost" ></alias>
    <alias name="example.com" ></alias>
     </virtual-server>
.. ..
</subsystem>

Environment

  • Red Hat JBoss Enterprise Application Platform (EAP) 6.x
  • JBossWeb Native library

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content