x509.CertAndKeyGen未在JVM在OpenAM初始配置

Question

發現在OSX小牛的組合，OpenAM 10.1.0，Tomcat8和JDK8， OpenAM初始GUI配置並不成功，導致一個錯誤：

[Click] [error] handleException: java.lang.RuntimeException: Error occurred invoking public method: public boolean com.sun.identity.config.wizard.Wizard.createConfig() at org.apache.click.util.ClickUtils.invokeMethod(ClickUtils.java:3335) at org.apache.click.util.ClickUtils.invokeListener(ClickUtils.java:2088) at org.apache.click.control.AbstractControl$1.onAction(AbstractControl.java:228) at org.apache.click.ActionEventDispatcher.fireActionEvent(ActionEventDispatcher.java:259) at org.apache.click.ActionEventDispatcher.fireActionEvents(ActionEventDispatcher.java:236) at org.apache.click.ActionEventDispatcher.fireActionEvents(ActionEventDispatcher.java:180) at org.apache.click.ClickServlet.performOnProcess(ClickServlet.java:746) at org.apache.click.ClickServlet.processAjaxPageEvents(ClickServlet.java:1860) at org.apache.click.ClickServlet.processPage(ClickServlet.java:559) at org.apache.click.ClickServlet.handleRequest(ClickServlet.java:383) at org.apache.click.ClickServlet.doGet(ClickServlet.java:276) at javax.servlet.http.HttpServlet.service(HttpServlet.java:617) at javax.servlet.http.HttpServlet.service(HttpServlet.java:723) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.forgerock.openam.validation.ResponseValidationFilter.doFilter(ResponseValidationFilter.java:44) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:99) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:861) at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:606) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) at java.lang.Thread.run(Thread.java:745) Caused by: java.lang.ExceptionInInitializerError: A security class cannot be found in this JVM because of the following reason: sun.security.x509.CertAndKeyGen at org.opends.server.util.Platform$PlatformIMPL.(Platform.java:127) at org.opends.server.util.Platform.(Platform.java:80) at org.opends.server.util.CertificateManager.generateSelfSignedCertificate(CertificateManager.java:283) at org.opends.server.admin.AdministrationConnector.createSelfSignedCertifIfNeeded(AdministrationConnector.java:698) at org.opends.server.admin.AdministrationConnector.initializeAdministrationConnector(AdministrationConnector.java:181) at org.opends.server.core.ConnectionHandlerConfigManager.initializeAdministrationConnectorConfig(ConnectionHandlerConfigManager.java:350) at org.opends.server.core.DirectoryServer.initializeAdministrationConnector(DirectoryServer.java:2898) at org.opends.server.core.DirectoryServer.startServer(DirectoryServer.java:1401) at org.opends.server.util.EmbeddedUtils.startServer(EmbeddedUtils.java:88) at com.sun.identity.setup.EmbeddedOpenDS.startServer(EmbeddedOpenDS.java:545) at com.sun.identity.setup.EmbeddedOpenDS.setup(EmbeddedOpenDS.java:364) at com.sun.identity.setup.AMSetupServlet.setupEmbeddedDS(AMSetupServlet.java:813) at com.sun.identity.setup.AMSetupServlet.setupSMDatastore(AMSetupServlet.java:869) at com.sun.identity.setup.AMSetupServlet.configure(AMSetupServlet.java:945) at com.sun.identity.setup.AMSetupServlet.processRequest(AMSetupServlet.java:628) at com.sun.identity.config.wizard.Wizard.createConfig(Wizard.java:294) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:483) at org.apache.click.util.ClickUtils.invokeMethod(ClickUtils.java:3317) ... 30 more

我也將JDK更改爲7或Tomcat爲7，這是無用的。

A security class cannot be found in this JVM because of the following reason: sun.security.x509.CertAndKeyGen

我知道JBoss的似乎是固定的這個錯誤，但我不知如何向我的環境下克服。

Answer 1

CertAndKeyGen類的問題實際上是OPENDJ-1142，這發生在配置程序嘗試設置嵌入式OpenDJ（它不支持JDK8）時發生。儘管如此，OpenAM還沒有在JDK8上運行（目前甚至沒有編譯 - 主要是因爲OPENAM-141），所以您一定需要使用JDK7和一個在JDK7上運行良好的容器。

實際上支持JDK7和Tomcat 7安裝程序，因此您可能想要提供有關安裝嘗試失敗的原因以及如何執行的更多信息。

Answer 2

我們需要準備的JBoss openam部署，通過添加以下內容到JBoss部署-structure.xml：

<exclude-subsystems> 
     <subsystem name="jaxrs" /> 
     <subsystem name="webservices" /> 
    </exclude-subsystems> 

    <dependencies> 
     <module name="sun.jdk" > 
      <imports> 
       <exclude-set> 
        <path name="com/sun/org/apache/xml/internal/security/transforms/implementations"/> 
       </exclude-set> 
      </imports> 
     </module> 
     <system> 
     <paths> 
      <path name="sun/security/x509" /> 
      <path name="com/sun/org/apache/xpath/internal" /> 
      <path name="com/sun/org/apache/xerces/internal/dom" /> 
      <path name="com/sun/org/apache/xml/internal/utils" /> 
     </paths> 
     </system> 
    </dependencies>