[jira] [Commented] (KAFKA-10642) Expose the real stack trace if any exception occurred during SSL Client Trust Verification in extension
[ https://issues.apache.org/jira/browse/KAFKA-10642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17517154#comment-17517154 ] Bruno Cadonna commented on KAFKA-10642: --- Removing from the 3.2.0 release since code freeze has passed. > Expose the real stack trace if any exception occurred during SSL Client Trust > Verification in extension > --- > > Key: KAFKA-10642 > URL: https://issues.apache.org/jira/browse/KAFKA-10642 > Project: Kafka > Issue Type: Bug > Components: clients >Affects Versions: 2.3.0, 2.4.0, 2.3.1, 2.5.0, 2.4.1, 2.6.0, 2.5.1 >Reporter: Senthilnathan Muthusamy >Assignee: Senthilnathan Muthusamy >Priority: Minor > Fix For: 3.2.0 > > > If there is any exception occurred in the custom implementation of client > trust verification (i.e. using security.provider), the inner exception is > suppressed or hidden and not logged to the log file... > > Below is an example stack trace not showing actual exception from the > extension/custom implementation. > > [2020-05-13 14:30:26,892] ERROR [KafkaServer id=423810470] Fatal error during > KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer)[2020-05-13 14:30:26,892] ERROR [KafkaServer > id=423810470] Fatal error during KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer) org.apache.kafka.common.KafkaException: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:71) > at > org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:146) > at > org.apache.kafka.common.network.ChannelBuilders.serverChannelBuilder(ChannelBuilders.java:85) > at kafka.network.Processor.(SocketServer.scala:753) at > kafka.network.SocketServer.newProcessor(SocketServer.scala:394) at > kafka.network.SocketServer.$anonfun$addDataPlaneProcessors$1(SocketServer.scala:279) > at scala.collection.immutable.Range.foreach$mVc$sp(Range.scala:158) at > kafka.network.SocketServer.addDataPlaneProcessors(SocketServer.scala:278) at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1(SocketServer.scala:241) > at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1$adapted(SocketServer.scala:238) > at scala.collection.mutable.ResizableArray.foreach(ResizableArray.scala:62) > at scala.collection.mutable.ResizableArray.foreach$(ResizableArray.scala:55) > at scala.collection.mutable.ArrayBuffer.foreach(ArrayBuffer.scala:49) at > kafka.network.SocketServer.createDataPlaneAcceptorsAndProcessors(SocketServer.scala:238) > at kafka.network.SocketServer.startup(SocketServer.scala:121) at > kafka.server.KafkaServer.startup(KafkaServer.scala:265) at > kafka.server.KafkaServerStartable.startup(KafkaServerStartable.scala:44) at > kafka.Kafka$.main(Kafka.scala:84) at kafka.Kafka.main(Kafka.scala)Caused by: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.security.ssl.SslFactory.configure(SslFactory.java:100) > at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:69) > ... 18 more -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (KAFKA-10642) Expose the real stack trace if any exception occurred during SSL Client Trust Verification in extension
[ https://issues.apache.org/jira/browse/KAFKA-10642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17443710#comment-17443710 ] David Jacot commented on KAFKA-10642: - Moving to the next release as we are past the 3.1 release code freeze. > Expose the real stack trace if any exception occurred during SSL Client Trust > Verification in extension > --- > > Key: KAFKA-10642 > URL: https://issues.apache.org/jira/browse/KAFKA-10642 > Project: Kafka > Issue Type: Bug > Components: clients >Affects Versions: 2.3.0, 2.4.0, 2.3.1, 2.5.0, 2.4.1, 2.6.0, 2.5.1 >Reporter: Senthilnathan Muthusamy >Assignee: Senthilnathan Muthusamy >Priority: Minor > Fix For: 3.1.0 > > > If there is any exception occurred in the custom implementation of client > trust verification (i.e. using security.provider), the inner exception is > suppressed or hidden and not logged to the log file... > > Below is an example stack trace not showing actual exception from the > extension/custom implementation. > > [2020-05-13 14:30:26,892] ERROR [KafkaServer id=423810470] Fatal error during > KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer)[2020-05-13 14:30:26,892] ERROR [KafkaServer > id=423810470] Fatal error during KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer) org.apache.kafka.common.KafkaException: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:71) > at > org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:146) > at > org.apache.kafka.common.network.ChannelBuilders.serverChannelBuilder(ChannelBuilders.java:85) > at kafka.network.Processor.(SocketServer.scala:753) at > kafka.network.SocketServer.newProcessor(SocketServer.scala:394) at > kafka.network.SocketServer.$anonfun$addDataPlaneProcessors$1(SocketServer.scala:279) > at scala.collection.immutable.Range.foreach$mVc$sp(Range.scala:158) at > kafka.network.SocketServer.addDataPlaneProcessors(SocketServer.scala:278) at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1(SocketServer.scala:241) > at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1$adapted(SocketServer.scala:238) > at scala.collection.mutable.ResizableArray.foreach(ResizableArray.scala:62) > at scala.collection.mutable.ResizableArray.foreach$(ResizableArray.scala:55) > at scala.collection.mutable.ArrayBuffer.foreach(ArrayBuffer.scala:49) at > kafka.network.SocketServer.createDataPlaneAcceptorsAndProcessors(SocketServer.scala:238) > at kafka.network.SocketServer.startup(SocketServer.scala:121) at > kafka.server.KafkaServer.startup(KafkaServer.scala:265) at > kafka.server.KafkaServerStartable.startup(KafkaServerStartable.scala:44) at > kafka.Kafka$.main(Kafka.scala:84) at kafka.Kafka.main(Kafka.scala)Caused by: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.security.ssl.SslFactory.configure(SslFactory.java:100) > at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:69) > ... 18 more -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (KAFKA-10642) Expose the real stack trace if any exception occurred during SSL Client Trust Verification in extension
[ https://issues.apache.org/jira/browse/KAFKA-10642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17383582#comment-17383582 ] Konstantine Karantasis commented on KAFKA-10642: Postponing to the subsequent release given that this issue is not a blocker and did not make it on time for 3.0 code freeze. Having said that, it seems it's been a while since there was any update on the associated PR. cc [~senthilm-ms] [~rajinisiva...@gmail.com] on whether this is still an issue. > Expose the real stack trace if any exception occurred during SSL Client Trust > Verification in extension > --- > > Key: KAFKA-10642 > URL: https://issues.apache.org/jira/browse/KAFKA-10642 > Project: Kafka > Issue Type: Bug > Components: clients >Affects Versions: 2.3.0, 2.4.0, 2.3.1, 2.5.0, 2.4.1, 2.6.0, 2.5.1 >Reporter: Senthilnathan Muthusamy >Assignee: Senthilnathan Muthusamy >Priority: Minor > Fix For: 3.0.0 > > > If there is any exception occurred in the custom implementation of client > trust verification (i.e. using security.provider), the inner exception is > suppressed or hidden and not logged to the log file... > > Below is an example stack trace not showing actual exception from the > extension/custom implementation. > > [2020-05-13 14:30:26,892] ERROR [KafkaServer id=423810470] Fatal error during > KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer)[2020-05-13 14:30:26,892] ERROR [KafkaServer > id=423810470] Fatal error during KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer) org.apache.kafka.common.KafkaException: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:71) > at > org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:146) > at > org.apache.kafka.common.network.ChannelBuilders.serverChannelBuilder(ChannelBuilders.java:85) > at kafka.network.Processor.(SocketServer.scala:753) at > kafka.network.SocketServer.newProcessor(SocketServer.scala:394) at > kafka.network.SocketServer.$anonfun$addDataPlaneProcessors$1(SocketServer.scala:279) > at scala.collection.immutable.Range.foreach$mVc$sp(Range.scala:158) at > kafka.network.SocketServer.addDataPlaneProcessors(SocketServer.scala:278) at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1(SocketServer.scala:241) > at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1$adapted(SocketServer.scala:238) > at scala.collection.mutable.ResizableArray.foreach(ResizableArray.scala:62) > at scala.collection.mutable.ResizableArray.foreach$(ResizableArray.scala:55) > at scala.collection.mutable.ArrayBuffer.foreach(ArrayBuffer.scala:49) at > kafka.network.SocketServer.createDataPlaneAcceptorsAndProcessors(SocketServer.scala:238) > at kafka.network.SocketServer.startup(SocketServer.scala:121) at > kafka.server.KafkaServer.startup(KafkaServer.scala:265) at > kafka.server.KafkaServerStartable.startup(KafkaServerStartable.scala:44) at > kafka.Kafka$.main(Kafka.scala:84) at kafka.Kafka.main(Kafka.scala)Caused by: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.security.ssl.SslFactory.configure(SslFactory.java:100) > at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:69) > ... 18 more -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (KAFKA-10642) Expose the real stack trace if any exception occurred during SSL Client Trust Verification in extension
[ https://issues.apache.org/jira/browse/KAFKA-10642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17306392#comment-17306392 ] John Roesler commented on KAFKA-10642: -- Hi [~senthilm-ms] , it looks like this has been ongoing for quite a while. I'll go ahead and bump it to 3.0, since at this point, a bug must be a regression or a severe issue to continue blocking 2.8 > Expose the real stack trace if any exception occurred during SSL Client Trust > Verification in extension > --- > > Key: KAFKA-10642 > URL: https://issues.apache.org/jira/browse/KAFKA-10642 > Project: Kafka > Issue Type: Bug > Components: clients >Affects Versions: 2.3.0, 2.4.0, 2.3.1, 2.5.0, 2.4.1, 2.6.0, 2.5.1 >Reporter: Senthilnathan Muthusamy >Assignee: Senthilnathan Muthusamy >Priority: Minor > Fix For: 2.8.0 > > > If there is any exception occurred in the custom implementation of client > trust verification (i.e. using security.provider), the inner exception is > suppressed or hidden and not logged to the log file... > > Below is an example stack trace not showing actual exception from the > extension/custom implementation. > > [2020-05-13 14:30:26,892] ERROR [KafkaServer id=423810470] Fatal error during > KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer)[2020-05-13 14:30:26,892] ERROR [KafkaServer > id=423810470] Fatal error during KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer) org.apache.kafka.common.KafkaException: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:71) > at > org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:146) > at > org.apache.kafka.common.network.ChannelBuilders.serverChannelBuilder(ChannelBuilders.java:85) > at kafka.network.Processor.(SocketServer.scala:753) at > kafka.network.SocketServer.newProcessor(SocketServer.scala:394) at > kafka.network.SocketServer.$anonfun$addDataPlaneProcessors$1(SocketServer.scala:279) > at scala.collection.immutable.Range.foreach$mVc$sp(Range.scala:158) at > kafka.network.SocketServer.addDataPlaneProcessors(SocketServer.scala:278) at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1(SocketServer.scala:241) > at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1$adapted(SocketServer.scala:238) > at scala.collection.mutable.ResizableArray.foreach(ResizableArray.scala:62) > at scala.collection.mutable.ResizableArray.foreach$(ResizableArray.scala:55) > at scala.collection.mutable.ArrayBuffer.foreach(ArrayBuffer.scala:49) at > kafka.network.SocketServer.createDataPlaneAcceptorsAndProcessors(SocketServer.scala:238) > at kafka.network.SocketServer.startup(SocketServer.scala:121) at > kafka.server.KafkaServer.startup(KafkaServer.scala:265) at > kafka.server.KafkaServerStartable.startup(KafkaServerStartable.scala:44) at > kafka.Kafka$.main(Kafka.scala:84) at kafka.Kafka.main(Kafka.scala)Caused by: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.security.ssl.SslFactory.configure(SslFactory.java:100) > at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:69) > ... 18 more -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (KAFKA-10642) Expose the real stack trace if any exception occurred during SSL Client Trust Verification in extension
[ https://issues.apache.org/jira/browse/KAFKA-10642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17221051#comment-17221051 ] Bill Bejeck commented on KAFKA-10642: - Hi [~senthilm-ms], since this is not a blocker issue and we've past code freeze for 2.7 I'm going to change the fix version of this ticket to 2.8 as part of the 2.7.0 release process. > Expose the real stack trace if any exception occurred during SSL Client Trust > Verification in extension > --- > > Key: KAFKA-10642 > URL: https://issues.apache.org/jira/browse/KAFKA-10642 > Project: Kafka > Issue Type: Bug > Components: clients >Affects Versions: 2.3.0, 2.4.0, 2.3.1, 2.5.0, 2.4.1, 2.6.0, 2.5.1 >Reporter: Senthilnathan Muthusamy >Assignee: Senthilnathan Muthusamy >Priority: Minor > Fix For: 2.7.0 > > > If there is any exception occurred in the custom implementation of client > trust verification (i.e. using security.provider), the inner exception is > suppressed or hidden and not logged to the log file... > > Below is an example stack trace not showing actual exception from the > extension/custom implementation. > > [2020-05-13 14:30:26,892] ERROR [KafkaServer id=423810470] Fatal error during > KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer)[2020-05-13 14:30:26,892] ERROR [KafkaServer > id=423810470] Fatal error during KafkaServer startup. Prepare to shutdown > (kafka.server.KafkaServer) org.apache.kafka.common.KafkaException: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:71) > at > org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:146) > at > org.apache.kafka.common.network.ChannelBuilders.serverChannelBuilder(ChannelBuilders.java:85) > at kafka.network.Processor.(SocketServer.scala:753) at > kafka.network.SocketServer.newProcessor(SocketServer.scala:394) at > kafka.network.SocketServer.$anonfun$addDataPlaneProcessors$1(SocketServer.scala:279) > at scala.collection.immutable.Range.foreach$mVc$sp(Range.scala:158) at > kafka.network.SocketServer.addDataPlaneProcessors(SocketServer.scala:278) at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1(SocketServer.scala:241) > at > kafka.network.SocketServer.$anonfun$createDataPlaneAcceptorsAndProcessors$1$adapted(SocketServer.scala:238) > at scala.collection.mutable.ResizableArray.foreach(ResizableArray.scala:62) > at scala.collection.mutable.ResizableArray.foreach$(ResizableArray.scala:55) > at scala.collection.mutable.ArrayBuffer.foreach(ArrayBuffer.scala:49) at > kafka.network.SocketServer.createDataPlaneAcceptorsAndProcessors(SocketServer.scala:238) > at kafka.network.SocketServer.startup(SocketServer.scala:121) at > kafka.server.KafkaServer.startup(KafkaServer.scala:265) at > kafka.server.KafkaServerStartable.startup(KafkaServerStartable.scala:44) at > kafka.Kafka$.main(Kafka.scala:84) at kafka.Kafka.main(Kafka.scala)Caused by: > org.apache.kafka.common.config.ConfigException: Invalid value > java.lang.RuntimeException: Delegated task threw Exception/Error for > configuration A client SSLEngine created with the provided settings can't > connect to a server SSLEngine created with those settings. at > org.apache.kafka.common.security.ssl.SslFactory.configure(SslFactory.java:100) > at > org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:69) > ... 18 more -- This message was sent by Atlassian Jira (v8.3.4#803005)
