RSA Identity Governance & Lifecycle 6.8.x and above remote Access Fulfilment Express (AFX) server fails to start with the error "SSL peer shut down incorrectly" in the logs
Originally Published: 2016-08-10
Article Number
Applies To
RSA Product/Service Type: Access Fulfilment Express
RSA Version/Condition: 6.8.x and above
Platform: WebSphere
Issue
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + New app '10_AFX-INIT' + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ERROR 2014-12-26 01:58:52,810 [WrapperListener_start_runner] org.mule.module.launcher.DeploymentService: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Failed to deploy app '10_AFX-INIT', see below + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ org.mule.module.launcher.DeploymentInitException: EOFException: SSL peer shut down incorrectly at org.mule.module.launcher.application.DefaultMuleApplication.init(DefaultMuleApplication.java:221) at org.mule.module.launcher.application.ApplicationWrapper.init(ApplicationWrapper.java:64) at org.mule.module.launcher.DefaultMuleDeployer.deploy(DefaultMuleDeployer.java:46) at org.mule.module.launcher.DeploymentService.guardedDeploy(DeploymentService.java:398) at org.mule.module.launcher.DeploymentService.start(DeploymentService.java:181) at org.mule.module.launcher.MuleContainer.start(MuleContainer.java:157) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:622) at org.mule.module.reboot.MuleContainerWrapper.start(MuleContainerWrapper.java:56) at org.tanukisoftware.wrapper.WrapperManager$12.run(WrapperManager.java:3925) Caused by: org.mule.api.config.ConfigurationException: Error creating bean with name 'serverInitialization' defined in URL [file:/home/oracle/AFX/mule/apps/10_AFX-INIT/mule-config.xml]: Instantiation of bean failed; nested exception is org.springframework.beans.BeanInstantiationException: Could not instantiate bean class [com.aveksa.afx.server.init.ServerInitializationComponent]: Constructor threw exception; nested exception is org.mule.api.lifecycle.InitialisationException: Server initialization failed! Please correct the issue and restart AFX. (org.mule.api.lifecycle.InitialisationException) (org.mule.api.config.ConfigurationException) ... 15 more
Cause
- The SSL configuration on WebSphere is not configured correctly. For example, the wrong path configured to the server.keystore or the wrong keystore password.
- The server.keystore on the application server file system is corrupt or outdated. For example, a new server.keystore has been generated from the UI, but not updated on the WebSphere application server file system.
Resolution
Follow the WebSphere SSL configuration steps found in the WebSphere installation guide relative to your version.
For 6.8.1
Follow the relevant steps under "Working with Keystores and Certificates" in Chapter 7 of the Identity Management & Governance 6.8.1 Installation Guide
- Getting the RSA IAM Platform Server Keystore File (page 32).
- Associating the RSA IAM Platform server.keystore File with Your WebSphere Server (page 33).
- Configuring the WebSphere Server SSL (page 33).
- Configuring SSL Port Assignment (page 34).
For 6.9.x
Follow the relevant steps under "Securing Internal Communication Between RSA IMG Components" in Chapter 3 of the Identity Management & Governance 6.9.1 Installation on WebSphere Guide:
- Download the RSA IMG Server Keystore File (page 33).
- Create a keystore in the WebSphere Server using the RSA IMG server.keystore File (page 33).
- Create an SSL Configuration in WebSphere using the RSA IMG Keystore (page 34).
- Configuring the SSL Port (page 34).
For 7.0.0
Follow the relevant steps under "Securing Internal Communication Between RSA IMG Components" in Appendix A of the RSA Via L&G 7.0 Installation Guide:
- Download the RSA Via L&G Server Keystore File (page 88).
- Create a keystore in the WebSphere Server using the RSA Via L&G server.keystore File (page 89).
- Create an SSL Configuration in WebSphere using the RSA Via L&G Keystore (page 89).
- Complete these additional steps if Access Fulfillment Express (AFX) is deployed along with RSA Via L&G (page 90).
- Configuring the SSL Port (page 90).
Related Articles
AFX Server intermittently shuts down in RSA Identity Governance & Lifecycle 311Number of Views Memory leak when continuously creating Access Fulfillment Express (AFX) Connectors in RSA Identity Governance & Lifecycle 153Number of Views Intermittent high CPU usage effecting overall performance in RSA Identity Governance & Lifecycle 7.x when using Password M… 105Number of Views AFX Server and Connector failures if AFX is started as the root user in RSA Identity Governance & Lifecycle 731Number of Views 'AFX server is not running' message printed in logs every minute for each unused (Disabled, Not running, or deleted) AFX S… 5Number of Views
Trending Articles
RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide RSA Governance & Lifecycle 8.0.0 Installation Guide Troubleshooting RSA MFA Agent for Microsoft Windows How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device
Don't see what you're looking for?