TLS exception

Openfire Openfire Support
1

Hello,

i installed to Openfire 3.5.1 with the .deb packages on Ubuntu hardy and created with the admin console self signed ssl certificates.

Now i got a lof of these exceptions:

2008.04.27 11:58:40 org.jivesoftware.openfire.net.TLSWrapper.(TLSWrapper.java:114) TLSHandler startup problem.

the KeyStore or TrustStore does not exist

java.io.IOException

at org.jivesoftware.openfire.net.SSLConfig.gets2sTrustStore(SSLConfig.java:279)

at org.jivesoftware.openfire.net.TLSWrapper.<init>(TLSWrapper.java:73)

at org.jivesoftware.openfire.net.TLSStreamHandler.<init>(TLSStreamHandler.ja va:97)

at org.jivesoftware.openfire.net.SocketConnection.startTLS(SocketConnection.java:1 60)

at org.jivesoftware.openfire.net.SocketReadingMode.negotiateTLS(SocketReadingMode. java:74)

at org.jivesoftware.openfire.net.BlockingReadingMode.readStream(BlockingReadingMod e.java:127)

at org.jivesoftware.openfire.net.BlockingReadingMode.run(BlockingReadingMode.java: 63)

at org.jivesoftware.openfire.net.SocketReader.run(SocketReader.java:120)

at java.lang.Thread.run(Thread.java:619)

2008.04.27 11:58:41 org.jivesoftware.openfire.net.TLSWrapper.(TLSWrapper.java:114) TLSHandler startup problem.

the KeyStore or TrustStore does not exist

java.io.IOException

at org.jivesoftware.openfire.net.SSLConfig.gets2sTrustStore(SSLConfig.java:279)

at org.jivesoftware.openfire.net.TLSWrapper.<init>(TLSWrapper.java:73)

at org.jivesoftware.openfire.net.TLSStreamHandler.<init>(TLSStreamHandler.ja va:97)

at org.jivesoftware.openfire.net.SocketConnection.startTLS(SocketConnection.java:1 60)

at org.jivesoftware.openfire.session.LocalOutgoingServerSession.secureAndAuthentic ate(LocalOutgoingServerSession.java:370)

at org.jivesoftware.openfire.session.LocalOutgoingServerSession.createOutgoingSess ion(LocalOutgoingServerSession.java:303)

at org.jivesoftware.openfire.session.LocalOutgoingServerSession.authenticateDomain (LocalOutgoingServerSession.java:144)

at org.jivesoftware.openfire.server.OutgoingSessionPromise$PacketsProcessor.sendPa cket(OutgoingSessionPromise.java:215)

at org.jivesoftware.openfire.server.OutgoingSessionPromise$PacketsProcessor.run(Ou tgoingSessionPromise.java:194)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java: 885)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:907)

at java.lang.Thread.run(Thread.java:619)

2008.04.27 11:58:41 org.jivesoftware.openfire.session.LocalOutgoingServerSession.createOutgoingSessi on(LocalOutgoingServerSession.java:339) Error creating secured outgoing session to remote server: im.rajango.net(DNS lookup: im.rajango.net:5269)

java.lang.NullPointerException

at org.jivesoftware.openfire.net.TLSStreamHandler.<init>(TLSStreamHandler.ja va:114)

at org.jivesoftware.openfire.net.SocketConnection.startTLS(SocketConnection.java:1 60)

at org.jivesoftware.openfire.session.LocalOutgoingServerSession.secureAndAuthentic ate(LocalOutgoingServerSession.java:370)

at org.jivesoftware.openfire.session.LocalOutgoingServerSession.createOutgoingSess ion(LocalOutgoingServerSession.java:303)

at org.jivesoftware.openfire.session.LocalOutgoingServerSession.authenticateDomain (LocalOutgoingServerSession.java:144)

at org.jivesoftware.openfire.server.OutgoingSessionPromise$PacketsProcessor.sendPa cket(OutgoingSessionPromise.java:215)

at org.jivesoftware.openfire.server.OutgoingSessionPromise$PacketsProcessor.run(Ou tgoingSessionPromise.java:194)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java: 885)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:907)

at java.lang.Thread.run(Thread.java:619)

ls -la /usr/share/openfire/resources

total 12

drwxr-x— 3 openfire openfire 4096 Apr 25 13:08 .

drwxr-x— 5 openfire openfire 4096 Apr 25 13:39 …

drwxr-x— 3 openfire openfire 4096 Apr 25 13:08 database

lrwxrwxrwx 1 openfire openfire 22 Apr 25 13:08 security -> /etc/openfire/security

ls -la /usr/share/openfire/resources/security/

total 16

drwxr-x— 2 openfire openfire 4096 Apr 25 13:08 .

drwxr-x— 3 openfire openfire 4096 Apr 27 07:46 …

-rw-r----- 1 openfire openfire 32 Apr 25 00:19 client.truststore

-rw-r----- 1 openfire openfire 2422 Apr 25 13:37 keystore

-rw-r----- 1 openfire openfire 0 Apr 25 13:37 truststore

2

Hm, your Openfire is not installed at default place. Have you tried this one:

ln -s /etc/openfire/security /opt/openfire/resources/security

just an idea…

3

Hi,

it is installed by the debian package provided by jive. It is not installed in /opt.

4

Nobody has a solutions for this?

5

same Problem here on my ubuntu machine. Has anyone a solution?

6

This problem still exist with OF 3.5.2 and a cleaned /etc/openfire/security/

7

Hello,

is issue still exist. Are there any news on this topic? Or a Jira issue i can subscribe to?

8

All the store files are looked for in the [jive home]/resources/security. You may override the default location using system properties:

xmpp.socket.ssl.keystore

xmpp.socket.ssl.client.truststore

xmpp.socket.ssl.truststore

Regards,

– Gato

9

Hello Gato,

i installed Opfenfire the the provided .deb package by igniterealtime.

So the openfire user home is in /var/lib/openfire and the security files are located in /etc/openfire/security

The 3 properties you mentioned are not set in my server properties page.

I recreated the SSL certs today using the “Server Certificates” page.

Both files are up2date, but the size of the truststore is 0 and the exception still occurs:

~$ sudo ls -la /etc/openfire/security
total 12
drwxr-x--- 2 openfire openfire 4096 Jun 14 11:44 .
drwxr-x--- 3 openfire openfire 4096 Jul 24 13:53 ..
-rw-r--r-- 1 openfire openfire 2786 Jul 25 09:51 keystore
-rw-r--r-- 1 openfire openfire    0 Jul 25 09:51 truststore

SSL/TLS for the administration website and login via jabber client works without any problem.