Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-16362

SSLFactory should initialize SSLContext before setting protocols

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Normal
    • Resolution: Fixed
    • 4.0-rc1, 4.0
    • Tool/bulk load
    • None

    Description

      Trying to use sstableloader from the latest trunk produced the following Exception:

      Exception in thread "main" java.lang.RuntimeException: Could not create SSL Context.
      at org.apache.cassandra.tools.BulkLoader.buildSSLOptions(BulkLoader.java:261)
      at org.apache.cassandra.tools.BulkLoader.load(BulkLoader.java:64)
      at org.apache.cassandra.tools.BulkLoader.main(BulkLoader.java:49)
      Caused by: java.io.IOException: Error creating/initializing the SSL Context
      at org.apache.cassandra.security.SSLFactory.createSSLContext(SSLFactory.java:184)
      at org.apache.cassandra.tools.BulkLoader.buildSSLOptions(BulkLoader.java:257)
      ... 2 more
      Caused by: java.lang.IllegalStateException: SSLContext is not initialized
      at sun.security.ssl.SSLContextImpl.engineGetSocketFactory(SSLContextImpl.java:208)
      at javax.net.ssl.SSLContextSpi.getDefaultSocket(SSLContextSpi.java:158)
      at javax.net.ssl.SSLContextSpi.engineGetDefaultSSLParameters(SSLContextSpi.java:184)
      at javax.net.ssl.SSLContext.getDefaultSSLParameters(SSLContext.java:435)
      at org.apache.cassandra.security.SSLFactory.createSSLContext(SSLFactory.java:178)
      ... 3 more

      I believe this is because of a change to SSLFactory for CASSANDRA-13325 here:

      https://github.com/apache/cassandra/commit/919a8964a83511d96766c3e53ba603e77bca626c#diff-0d569398cfd58566fc56bfb80c971a72afe3f392addc2df731a0b44baf29019eR177-R178

       

      I think the solution is to call ctx.init() before trying to call ctx.getDefaultSSLParameters(), essentialy swapping the two lines in the link above.

      Attachments

        Activity

          People

            jmeredithco Jon Meredith
            emerkle826 Erik Merkle
            Jon Meredith
            David Capwell, Dinesh Joshi
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 1h 10m
                1h 10m