java.lang.IllegalArgumentException: Non-readable path specified for ssl-crl-path option: /etc/puppetlabs/puppet/ssl/crl.pem

JIRA | Eric Sorenson | 9 months ago
  1. 0

    When migrating to a new PE infrastructure, we want to preserve existing CA so that we don't have to re-issue agent certificates. We thought it'd be possible to just move the ca subdirectory over from the old 3.x infrastructure, but the upgrader hit a timeout talking to the puppetserver. Investigating the logs showed it failed trying to load {{/etc/puppetlabs/puppet/ssl/crl.pem}}. This condition probably shouldn't be fatal as it caused the installation to fail completely. {noformat} 2016-05-02 21:32:29,638 ERROR [main] [p.t.internal] Error during service start!!! java.lang.IllegalArgumentException: Non-readable path specified for ssl-crl-path option: /etc/puppetlabs/puppet/ssl/crl.pem at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21656$get_ssl_crl_path_BANG___21657$fn__21658.invoke(jetty9_config.clj:329) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21656$get_ssl_crl_path_BANG___21657.invoke(jetty9_config.clj:322) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21795$maybe_get_https_connector__21796$fn__21797.invoke(jetty9_config.clj:403) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21795$maybe_get_https_connector__21796.invoke(jetty9_config.clj:390) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21836$maybe_add_https_connector__21837$fn__21838.invoke(jetty9_config.clj:417) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21836$maybe_add_https_connector__21837.invoke(jetty9_config.clj:413) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21857$process_config__21858$fn__21859.invoke(jetty9_config.clj:437) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21857$process_config__21858.invoke(jetty9_config.clj:433) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22327$create_webserver__22328$fn__22329.invoke(jetty9_core.clj:593) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22327$create_webserver__22328.invoke(jetty9_core.clj:550) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22351$start_webserver_BANG___22352$fn__22353.invoke(jetty9_core.clj:625) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22351$start_webserver_BANG___22352.invoke(jetty9_core.clj:620) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$start_server_multiple$iter__22558__22562$fn__22563.invoke(jetty9_core.clj:846) ~[na:na] at clojure.lang.LazySeq.sval(LazySeq.java:40) ~[puppet-server-release.jar:na] at clojure.lang.LazySeq.seq(LazySeq.java:49) ~[puppet-server-release.jar:na] at clojure.lang.RT.seq(RT.java:484) ~[puppet-server-release.jar:na] at clojure.core$seq.invoke(core.clj:133) ~[puppet-server-release.jar:na] at clojure.core.protocols$seq_reduce.invoke(protocols.clj:30) ~[puppet-server-release.jar:na] at clojure.core.protocols$fn__6078.invoke(protocols.clj:54) ~[puppet-server-release.jar:na] at clojure.core.protocols$fn__6031$G__6026__6044.invoke(protocols.clj:13) ~[puppet-server-release.jar:na] at clojure.core$reduce.invoke(core.clj:6289) ~[puppet-server-release.jar:na] at clojure.core$into.invoke(core.clj:6341) ~[puppet-server-release.jar:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$start_server_multiple.invoke(jetty9_core.clj:847) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22669$start_BANG___22670$fn__22671.invoke(jetty9_core.clj:918) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22669$start_BANG___22670.invoke(jetty9_core.clj:912) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_service$reify__22998$service_fnk__4363__auto___positional$reify__23005.start(jetty9_service.clj:43) ~[na:na] at puppetlabs.trapperkeeper.services$eval4199$fn__4213$G__4189__4216.invoke(services.clj:8) ~[na:na] at puppetlabs.trapperkeeper.services$eval4199$fn__4213$G__4188__4220.invoke(services.clj:8) ~[na:na] at puppetlabs.trapperkeeper.internal$run_lifecycle_fn_BANG_.invoke(internal.clj:152) ~[na:na] at puppetlabs.trapperkeeper.internal$run_lifecycle_fns.invoke(internal.clj:180) ~[na:na] {noformat}

    JIRA | 9 months ago | Eric Sorenson
    java.lang.IllegalArgumentException: Non-readable path specified for ssl-crl-path option: /etc/puppetlabs/puppet/ssl/crl.pem
  2. 0

    When migrating to a new PE infrastructure, we want to preserve existing CA so that we don't have to re-issue agent certificates. We thought it'd be possible to just move the ca subdirectory over from the old 3.x infrastructure, but the upgrader hit a timeout talking to the puppetserver. Investigating the logs showed it failed trying to load {{/etc/puppetlabs/puppet/ssl/crl.pem}}. This condition probably shouldn't be fatal as it caused the installation to fail completely. {noformat} 2016-05-02 21:32:29,638 ERROR [main] [p.t.internal] Error during service start!!! java.lang.IllegalArgumentException: Non-readable path specified for ssl-crl-path option: /etc/puppetlabs/puppet/ssl/crl.pem at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21656$get_ssl_crl_path_BANG___21657$fn__21658.invoke(jetty9_config.clj:329) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21656$get_ssl_crl_path_BANG___21657.invoke(jetty9_config.clj:322) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21795$maybe_get_https_connector__21796$fn__21797.invoke(jetty9_config.clj:403) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21795$maybe_get_https_connector__21796.invoke(jetty9_config.clj:390) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21836$maybe_add_https_connector__21837$fn__21838.invoke(jetty9_config.clj:417) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21836$maybe_add_https_connector__21837.invoke(jetty9_config.clj:413) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21857$process_config__21858$fn__21859.invoke(jetty9_config.clj:437) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21857$process_config__21858.invoke(jetty9_config.clj:433) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22327$create_webserver__22328$fn__22329.invoke(jetty9_core.clj:593) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22327$create_webserver__22328.invoke(jetty9_core.clj:550) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22351$start_webserver_BANG___22352$fn__22353.invoke(jetty9_core.clj:625) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22351$start_webserver_BANG___22352.invoke(jetty9_core.clj:620) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$start_server_multiple$iter__22558__22562$fn__22563.invoke(jetty9_core.clj:846) ~[na:na] at clojure.lang.LazySeq.sval(LazySeq.java:40) ~[puppet-server-release.jar:na] at clojure.lang.LazySeq.seq(LazySeq.java:49) ~[puppet-server-release.jar:na] at clojure.lang.RT.seq(RT.java:484) ~[puppet-server-release.jar:na] at clojure.core$seq.invoke(core.clj:133) ~[puppet-server-release.jar:na] at clojure.core.protocols$seq_reduce.invoke(protocols.clj:30) ~[puppet-server-release.jar:na] at clojure.core.protocols$fn__6078.invoke(protocols.clj:54) ~[puppet-server-release.jar:na] at clojure.core.protocols$fn__6031$G__6026__6044.invoke(protocols.clj:13) ~[puppet-server-release.jar:na] at clojure.core$reduce.invoke(core.clj:6289) ~[puppet-server-release.jar:na] at clojure.core$into.invoke(core.clj:6341) ~[puppet-server-release.jar:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$start_server_multiple.invoke(jetty9_core.clj:847) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22669$start_BANG___22670$fn__22671.invoke(jetty9_core.clj:918) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22669$start_BANG___22670.invoke(jetty9_core.clj:912) ~[na:na] at puppetlabs.trapperkeeper.services.webserver.jetty9_service$reify__22998$service_fnk__4363__auto___positional$reify__23005.start(jetty9_service.clj:43) ~[na:na] at puppetlabs.trapperkeeper.services$eval4199$fn__4213$G__4189__4216.invoke(services.clj:8) ~[na:na] at puppetlabs.trapperkeeper.services$eval4199$fn__4213$G__4188__4220.invoke(services.clj:8) ~[na:na] at puppetlabs.trapperkeeper.internal$run_lifecycle_fn_BANG_.invoke(internal.clj:152) ~[na:na] at puppetlabs.trapperkeeper.internal$run_lifecycle_fns.invoke(internal.clj:180) ~[na:na] {noformat}

    JIRA | 9 months ago | Eric Sorenson
    java.lang.IllegalArgumentException: Non-readable path specified for ssl-crl-path option: /etc/puppetlabs/puppet/ssl/crl.pem
  3. 0
    Probably you try to create an actor using actorSystem.actorOf(Props(classOf[AnyActor], args...)) where args does not match AnyActor constructor parameters.
  4. Speed up your debug routine!

    Automated exception search integrated into your IDE

  5. 0
    Some bots are sending malformed HTTP requests to your site. Try to find their IP addresses in the access logs and ask them to fix the bots or blacklist them.

    Not finding the right solution?
    Take a tour to get the most out of Samebug.

    Tired of useless tips?

    Automated exception search integrated into your IDE

    Root Cause Analysis

    1. java.lang.IllegalArgumentException

      Non-readable path specified for ssl-crl-path option: /etc/puppetlabs/puppet/ssl/crl.pem

      at puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21656$get_ssl_crl_path_BANG___21657$fn__21658.invoke()
    2. puppetlabs.trapperkeeper.services
      jetty9_core$start_server_multiple$iter__22558__22562$fn__22563.invoke
      1. puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21656$get_ssl_crl_path_BANG___21657$fn__21658.invoke(jetty9_config.clj:329)[na:na]
      2. puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21656$get_ssl_crl_path_BANG___21657.invoke(jetty9_config.clj:322)[na:na]
      3. puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21795$maybe_get_https_connector__21796$fn__21797.invoke(jetty9_config.clj:403)[na:na]
      4. puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21795$maybe_get_https_connector__21796.invoke(jetty9_config.clj:390)[na:na]
      5. puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21836$maybe_add_https_connector__21837$fn__21838.invoke(jetty9_config.clj:417)[na:na]
      6. puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21836$maybe_add_https_connector__21837.invoke(jetty9_config.clj:413)[na:na]
      7. puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21857$process_config__21858$fn__21859.invoke(jetty9_config.clj:437)[na:na]
      8. puppetlabs.trapperkeeper.services.webserver.jetty9_config$eval21857$process_config__21858.invoke(jetty9_config.clj:433)[na:na]
      9. puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22327$create_webserver__22328$fn__22329.invoke(jetty9_core.clj:593)[na:na]
      10. puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22327$create_webserver__22328.invoke(jetty9_core.clj:550)[na:na]
      11. puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22351$start_webserver_BANG___22352$fn__22353.invoke(jetty9_core.clj:625)[na:na]
      12. puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22351$start_webserver_BANG___22352.invoke(jetty9_core.clj:620)[na:na]
      13. puppetlabs.trapperkeeper.services.webserver.jetty9_core$start_server_multiple$iter__22558__22562$fn__22563.invoke(jetty9_core.clj:846)[na:na]
      13 frames
    3. Clojure
      core$into.invoke
      1. clojure.lang.LazySeq.sval(LazySeq.java:40)[puppet-server-release.jar:na]
      2. clojure.lang.LazySeq.seq(LazySeq.java:49)[puppet-server-release.jar:na]
      3. clojure.lang.RT.seq(RT.java:484)[puppet-server-release.jar:na]
      4. clojure.core$seq.invoke(core.clj:133)[puppet-server-release.jar:na]
      5. clojure.core.protocols$seq_reduce.invoke(protocols.clj:30)[puppet-server-release.jar:na]
      6. clojure.core.protocols$fn__6078.invoke(protocols.clj:54)[puppet-server-release.jar:na]
      7. clojure.core.protocols$fn__6031$G__6026__6044.invoke(protocols.clj:13)[puppet-server-release.jar:na]
      8. clojure.core$reduce.invoke(core.clj:6289)[puppet-server-release.jar:na]
      9. clojure.core$into.invoke(core.clj:6341)[puppet-server-release.jar:na]
      9 frames
    4. puppetlabs.trapperkeeper.services
      jetty9_service$reify__22998$service_fnk__4363__auto___positional$reify__23005.start
      1. puppetlabs.trapperkeeper.services.webserver.jetty9_core$start_server_multiple.invoke(jetty9_core.clj:847)[na:na]
      2. puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22669$start_BANG___22670$fn__22671.invoke(jetty9_core.clj:918)[na:na]
      3. puppetlabs.trapperkeeper.services.webserver.jetty9_core$eval22669$start_BANG___22670.invoke(jetty9_core.clj:912)[na:na]
      4. puppetlabs.trapperkeeper.services.webserver.jetty9_service$reify__22998$service_fnk__4363__auto___positional$reify__23005.start(jetty9_service.clj:43)[na:na]
      4 frames
    5. puppetlabs.trapperkeeper
      internal$run_lifecycle_fns.invoke
      1. puppetlabs.trapperkeeper.services$eval4199$fn__4213$G__4189__4216.invoke(services.clj:8)[na:na]
      2. puppetlabs.trapperkeeper.services$eval4199$fn__4213$G__4188__4220.invoke(services.clj:8)[na:na]
      3. puppetlabs.trapperkeeper.internal$run_lifecycle_fn_BANG_.invoke(internal.clj:152)[na:na]
      4. puppetlabs.trapperkeeper.internal$run_lifecycle_fns.invoke(internal.clj:180)[na:na]
      4 frames