[KARAF-1683] "no matching cipher found" error connecting via SSH to wrapper Karaf service - on Ubuntu

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.8, 2.3.0
• Fix Version/s: 2.2.9, 2.3.0, 3.0.0
• Component/s: karaf

Environment

Ubuntu 12.04 64-bit. OpenJDK 7

• Assignee: Jean-Baptiste Onofré
• Reporter: Hendy Irawan
• Created: 28/Jul/12 22:25
• Updated: 15/Sep/18 05:24
• Resolved: 29/Jul/12 12:55

Description

When wrapper is used to install service in Ubuntu 12.04 (or any Ubuntu for that matter, probably Debian too), SSH is not possible.

no matching cipher found: client aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[e-mail] server 

The reason is Debian doesn't set JAVA_HOME due to policy (https://bugs.launchpad.net/ubuntu/+source/java-common/+bug/364794)

Workaround is to put this in the bin/<name>-service script :

export JAVA_HOME=$(readlink -f /usr/bin/javac | sed "s:/bin/javac::")

It should be default, or probably like this :

[ -z $JAVA_HOME ] && export JAVA_HOME=$(readlink -f /usr/bin/javac | sed "s:/bin/javac::")

Issue Links

• is related to: KARAF-1684 org.apache.karaf.shell.ssh under wrapper throws UnsupportedClassVersionError: com/sun/crypto/provider/SunJCE : Unsupported major.minor version 51.0 under Ubuntu 12.04 OpenJDK 7 i386
• relates to: KARAF-1756 No SSH connection possible on Debian 6.0.5
• relates to: KARAF-260 ssh to karaf shell gives "no matching cipher found"
• relates to: KARAF-816 Wrapper feature doesn't load security libraries