[JAMES-3206] Keystore Exception when running the "Basic" Server

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Abandoned
• Assignee: Unassigned
• Reporter: David Leangen
• Created: 09/Jun/20 12:27
• Updated: 11/Feb/22 11:23
• Resolved: 14/Jun/20 03:52

Description

When attempting to run the "Basic" server (jpa-guice) out-of-the-box, I am unable to get the server running due to a password exception:

12:13:26.044 [ERROR] o.a.j.GuiceJamesServer - Fatal error while starting James
java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: java.lang.IllegalStateException: password has been cleared
 ... 32 common frames omitted
Wrapped by: java.io.IOException: keystore password was incorrect
 at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(Unknown Source)
 at java.base/sun.security.util.KeyStoreDelegator.engineLoad(Unknown Source)
 at java.base/java.security.KeyStore.load(Unknown Source)
 at org.apache.james.protocols.lib.netty.AbstractConfigurableAsyncServer.buildSSLContext(AbstractConfigurableAsyncServer.java:396)
 at org.apache.james.protocols.lib.netty.AbstractConfigurableAsyncServer.init(AbstractConfigurableAsyncServer.java:264)
 at org.apache.james.protocols.lib.netty.AbstractServerFactory.init(AbstractServerFactory.java:58)
 at org.apache.james.modules.protocols.IMAPServerModule.lambda$configureImap$0(IMAPServerModule.java:93)
 at org.apache.james.utils.InitilizationOperationBuilder$PrivateImpl.initModule(InitilizationOperationBuilder.java:52)
 at com.github.fge.lambdas.consumers.ConsumerChainer.lambda$sneakyThrow$9(ConsumerChainer.java:73)
 at java.base/java.util.stream.ReferencePipeline$11$1.accept(Unknown Source)
 at java.base/java.util.stream.DistinctOps$1$2.accept(Unknown Source)
 at java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.accept(Unknown Source)
 at java.base/java.util.stream.ReferencePipeline$2$1.accept(Unknown Source)
 at java.base/java.util.Spliterators$ArraySpliterator.forEachRemaining(Unknown Source)
 at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)
 at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)
 at java.base/java.util.stream.ForEachOps$ForEachOp.evaluateSequential(Unknown Source)
 at java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateSequential(Unknown Source)
 at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)
 at java.base/java.util.stream.ReferencePipeline.forEach(Unknown Source)
 at java.base/java.util.stream.ReferencePipeline$7$1.accept(Unknown Source)
 at java.base/java.util.Spliterators$ArraySpliterator.forEachRemaining(Unknown Source)
 at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)
 at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)
 at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(Unknown Source)
 at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)
 at java.base/java.util.stream.ReferencePipeline.collect(Unknown Source)
 at org.apache.james.utils.InitializationOperations.processConfigurables(InitializationOperations.java:53)
 at org.apache.james.utils.InitializationOperations.initModules(InitializationOperations.java:43)
 at org.apache.james.GuiceJamesServer.start(GuiceJamesServer.java:93)
 at org.apache.james.JamesServerMain.main(JamesServerMain.java:24)
 at org.apache.james.JPAJamesServerMain.main(JPAJamesServerMain.java:105)
12:14:23.287 [ERROR] o.a.j.PeriodicalHealthChecks - UNHEALTHY: Guice application lifecycle : James server is not started.

 I opened a session into the docker container to test the keystore. It exists in the conf directory and works as intended with the default password.

So I do not know why this exception occurs and the server does not start.

Issue Links

• is related to: JAMES-2330 Give ability to override AbstractConfigurableAsyncServer.buildSSLContext
• is related to: JAMES-2631 TLS 1.2 problems with Certificate Request
• is related to: JAMES-3209 Auth Module to make James usable with Nginx mail proxy for TLS termination
• is related to: JAMES-3215 Update SSL support in James