AnsweredAssumed Answered

Exception unmarshalling type: java.lang.Class Exception: com.sun.xml.internal.bind.v2.ContextFactory

Question asked by mridula nainani on May 11, 2017
Latest reply on May 17, 2017 by mridula nainani

Like • Show 0 Likes0
Comment • 7

While calling authapi-8.6.jar in EclipseJuno IDE , following error is coming for missing dependency . Sample code run is successful , but call from mavenized environment issues is coming

[2017-04-04 20:14:50,939] FATAL http-/10.40.130.87:8080-5 - Exception unmarshalling type: java.lang.Class Exception: com.sun.xml.internal.bind.v2.ContextFactory

RSA API is downloaded from following : https://community.rsa.com/docs/DOC-53593

RSA SecurID Authentication Agent API 8.6 for Java

Dependency is called inside in authapi-8.6.jar inside JAXB.properties

javax.xml.bind.context.factory=com.sun.xml.internal.bind.v2.ContextFactory

Request you to please provide solution
Reference case no : 00966273

Ted Barbour

May 16, 2017 11:09 AM

Correct Answer

Did you follow the Dev Guide instructions concerning java security policy files?

If you have already done this, I would recommend opening a support case to troubleshoot further.

Configure Message Key Negotiation

To configure message key negotiation, you must copy RSA JSafe jar files and download policy files to utilize the encryption and decryption functionalities of the JCE framework.

1. From the <kit_root>/lib folder, copy certj-6.1.jar, sslj-6.1.0.1.jar, cryptojce-6.1.3.3.jar, cryptojcommon-6.1.3.3.jar, and jcmFIPS-6.1.3.3.jar to the following location.

o <JAVA_HOME>/jre/lib/ext/

2. Edit the <JAVA_HOME>/jre/lib/security/java.security file so that the two RSA security providers are listed first.

o security.provider.1=com.rsa.jsafe.provider.JsafeJCE
security.provider.2=com.rsa.jsse.JsseProvider

3. To use the encryption and decryption functionalities of the JCE framework without any limitation, download the policy jar files for your Java virtual machine (JVM).

o If you are using the Oracle JDK 1.6, download the JCE Unlimited Strength Jurisdiction Policy Files 6.

http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html

o If you are using the Oracle JDK 1.7 or OpenJDK 1.7, download the JCE Unlimited Strength Jurisdiction Policy Files 7.

http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

o If you are using the Oracle JDK 1.8, download the JCE Unlimited Strength Jurisdiction Policy Files 8.

http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

4. Unzip the policy jar files, and copy the unlimited policy files US_export_policy.jar and local_policy.jar to the lib/security folder of the JDK installation. For example:

o <JAVA_HOME>/jre/lib/security directory

See the reply in context

Attachments

authapi-8.6.jar393.6 KB

No one else had this question

Outcomes

Ted Barbour

May 11, 2017 11:11 AM

Hi - can you provide the agent API debug log and the full stack trace?

Actions

mridula nainani @ Ted Barbour on May 12, 2017 9:35 AM

Dear Ted,

Dependency error was resolved by adding JAVA HOME JRE\LIB and LIB jars explicitly to build path of eclipse

Not Sure why explicitly JARS had to be added in Eclipse build path, Since compile time no error came and it referred JRE System library .

However for Build error we had to again add Jars to Build Path in Eclipse .

However following error is coming now :

ERROR http-/10.40.130.87:8080-4 - Error in processing Authn request: Unsupported ciphersuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ERROR http-/10.40.130.87:8080-4 - Error in initial AuthnReq/Rsp for serverTime.Error in processing Authn request: Unsupported ciphersuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Complete error stack :

INFO http-/10.40.130.87:8080-4 - {Realmconfig.updateVersionInfoFromSdconf} Sdconf length = 2780

DEBUG http-/10.40.130.87:8080-4 - set trusted CA from D:\jboss-eap-6.3\bin\Agents\Artifacts
Test IFD\root.cer

DEBUG http-/10.40.130.87:8080-4 - {AgentConfigHandler.updateBootStrapData} Its UPDATE_NOT_REQUIRED config response, let us not update LoadBalancing info

DEBUG http-/10.40.130.87:8080-4 - Added factory info for : com.rsa.authmgr.commonagent.xsd.bootstrap.AgentConfigurationType

INFO http-/10.40.130.87:8080-4 - {AgentConfigHandler.initializeConfig} using client-configured connect timeout: 60

INFO http-/10.40.130.87:8080-4 - {AgentConfigHandler.initializeConfig} using client-configured read timeout: 60

INFO http-/10.40.130.87:8080-4 - Invoking MessageKey Service to negotiate key

INFO http-/10.40.130.87:8080-4 - MaxRetry: 0 Total Servers: 1

DEBUG http-/10.40.130.87:8080-4 - Added JAXB context for : com.rsa.authmgr.commonagent.xsd.authn

DEBUG http-/10.40.130.87:8080-4 - Added factory info for : com.rsa.authmgr.commonagent.xsd.authn.AuthnRequestType

DEBUG http-/10.40.130.87:8080-4 - constructing client key negotiation context.

ERROR http-/10.40.130.87:8080-4 - Error in processing Authn request: Unsupported ciphersuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ERROR http-/10.40.130.87:8080-4 - Error in initial AuthnReq/Rsp for serverTime.Error in processing Authn request: Unsupported ciphersuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Tech Stack Used :

Java 1.7

Jboss 6.3

Actions

Ted Barbour

@ mridula nainani on May 12, 2017 10:03 AM

Thanks for the information.

What is the Authentication Manager version you are using?

Are you limited to using java 1.7 or could you use 1.8?

Actions

mridula nainani @ Ted Barbour on May 16, 2017 10:45 AM

Dear Ted,

Thanks for your input , We have upgraded to Java 8 as suggested AM version

is 8.1 SP13 .

Error coming is , Request you to please guide for the same

19:28:51,103 INFO (http-/10.40.130.87:8080-1) [2017-05-16

19:28:51,103] DEBUG http-/10.40.130.87:8080-1 - constructing client key

negotiation context.

19:28:53,762 INFO (http-/10.40.130.87:8080-1) [2017-05-16

19:28:53,762] ERROR http-/10.40.130.87:8080-1 - Error in processing Authn

request: Cannot support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently

installed providers

19:28:53,762 ERROR

(http-/10.40.130.87:8080-1) Error in processing Authn request: Cannot

support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed

providers

19:28:53,763 INFO (http-/10.40.130.87:8080-1) [2017-05-16

19:28:53,763] ERROR http-/10.40.130.87:8080-1 - Error in initial

AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot

support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed

providers

19:28:53,763 ERROR

(http-/10.40.130.87:8080-1) Error in initial AuthnReq/Rsp for

serverTime.Error in processing Authn request: Cannot support

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers

19:28:53,764 INFO (http-/10.40.130.87:8080-1) Can't create api:

com.rsa.authagent.authapi.AuthAgentException: Error in initial

AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot

support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed

providers

19:28:53,764 INFO (http-/10.40.130.87:8080-1)

19:28:53,765 ERROR (http-/10.40.130.87:8080-1)

com.rsa.authagent.authapi.AuthAgentException:

com.rsa.authagent.authapi.AuthAgentException: Error in initial

AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot

support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed

providers

Thanks and Regards

Mridula Nainani

Actions

Ted Barbour

@ mridula nainani on May 16, 2017 11:09 AM

Did you follow the Dev Guide instructions concerning java security policy files?

If you have already done this, I would recommend opening a support case to troubleshoot further.

Configure Message Key Negotiation

To configure message key negotiation, you must copy RSA JSafe jar files and download policy files to utilize the encryption and decryption functionalities of the JCE framework.

1. From the <kit_root>/lib folder, copy certj-6.1.jar, sslj-6.1.0.1.jar, cryptojce-6.1.3.3.jar, cryptojcommon-6.1.3.3.jar, and jcmFIPS-6.1.3.3.jar to the following location.

o <JAVA_HOME>/jre/lib/ext/

2. Edit the <JAVA_HOME>/jre/lib/security/java.security file so that the two RSA security providers are listed first.

o security.provider.1=com.rsa.jsafe.provider.JsafeJCE
security.provider.2=com.rsa.jsse.JsseProvider

3. To use the encryption and decryption functionalities of the JCE framework without any limitation, download the policy jar files for your Java virtual machine (JVM).

o If you are using the Oracle JDK 1.6, download the JCE Unlimited Strength Jurisdiction Policy Files 6.

http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html

o If you are using the Oracle JDK 1.7 or OpenJDK 1.7, download the JCE Unlimited Strength Jurisdiction Policy Files 7.

http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

o If you are using the Oracle JDK 1.8, download the JCE Unlimited Strength Jurisdiction Policy Files 8.

http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

4. Unzip the policy jar files, and copy the unlimited policy files US_export_policy.jar and local_policy.jar to the lib/security folder of the JDK installation. For example:

o <JAVA_HOME>/jre/lib/security directory

1 person found this helpful

Actions

mridula nainani @ Ted Barbour on May 17, 2017 9:39 AM

Thanks Ted issue is now resolved

Actions

Piers Bowness

May 12, 2017 9:06 AM

Hi Mridula,

Another option you might consider would be to look at the new RSA SecurID Authentication API. This is a REST-based interface available in AM 8.2 SP1 and is based on a OpenAPI interface specification. The OpenAPI interface specification is posted at DOC-71396 - RSA SecurID Authentication API Definition. This allows customers to generate client language bindings in a variety of different languages by importing the interface definitions (including Java!).

Note: RSA Authentication Manager AM 8.2 SP1 is required and the REST authentication service must be enabled in the System Settings interface.

Actions

Incoming Links

7 Replies

Ted Barbour May 11, 2017 11:11 AM
Mark Correct
Correct Answer
Hi - can you provide the agent API debug log and the full stack trace?
Like • Show 0 Likes0
Actions
- mridula nainani @ Ted Barbour on May 12, 2017 9:35 AM
  Mark Correct
  Correct Answer
  Dear Ted,
  
  Dependency error was resolved by adding JAVA HOME JRE\LIB and LIB jars explicitly to build path of eclipse
  Not Sure why explicitly JARS had to be added in Eclipse build path, Since compile time no error came and it referred JRE System library .
  However for Build error we had to again add Jars to Build Path in Eclipse .
  
  However following error is coming now :
  
  ERROR http-/10.40.130.87:8080-4 - Error in processing Authn request: Unsupported ciphersuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  ERROR http-/10.40.130.87:8080-4 - Error in initial AuthnReq/Rsp for serverTime.Error in processing Authn request: Unsupported ciphersuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  
  Complete error stack :
  
  INFO http-/10.40.130.87:8080-4 - {Realmconfig.updateVersionInfoFromSdconf} Sdconf length = 2780
  DEBUG http-/10.40.130.87:8080-4 - set trusted CA from D:\jboss-eap-6.3\bin\Agents\Artifacts
  Test IFD\root.cer
  DEBUG http-/10.40.130.87:8080-4 - {AgentConfigHandler.updateBootStrapData} Its UPDATE_NOT_REQUIRED config response, let us not update LoadBalancing info
  DEBUG http-/10.40.130.87:8080-4 - Added factory info for : com.rsa.authmgr.commonagent.xsd.bootstrap.AgentConfigurationType
  INFO http-/10.40.130.87:8080-4 - {AgentConfigHandler.initializeConfig} using client-configured connect timeout: 60
  INFO http-/10.40.130.87:8080-4 - {AgentConfigHandler.initializeConfig} using client-configured read timeout: 60
  INFO http-/10.40.130.87:8080-4 - Invoking MessageKey Service to negotiate key
  INFO http-/10.40.130.87:8080-4 - MaxRetry: 0 Total Servers: 1
  DEBUG http-/10.40.130.87:8080-4 - Added JAXB context for : com.rsa.authmgr.commonagent.xsd.authn
  DEBUG http-/10.40.130.87:8080-4 - Added factory info for : com.rsa.authmgr.commonagent.xsd.authn.AuthnRequestType
  DEBUG http-/10.40.130.87:8080-4 - constructing client key negotiation context.
  ERROR http-/10.40.130.87:8080-4 - Error in processing Authn request: Unsupported ciphersuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  ERROR http-/10.40.130.87:8080-4 - Error in initial AuthnReq/Rsp for serverTime.Error in processing Authn request: Unsupported ciphersuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  
  Tech Stack Used :
  
  Java 1.7
  Jboss 6.3
  Like • Show 0 Likes0
  Actions
  - Ted Barbour @ mridula nainani on May 12, 2017 10:03 AM
    Mark Correct
    Correct Answer
    Thanks for the information.
    What is the Authentication Manager version you are using?
    Are you limited to using java 1.7 or could you use 1.8?
    Like • Show 0 Likes0
    Actions
    - mridula nainani @ Ted Barbour on May 16, 2017 10:45 AM
      Mark Correct
      Correct Answer
      Dear Ted,
      
      Thanks for your input , We have upgraded to Java 8 as suggested AM version
      is 8.1 SP13 .
      
      Error coming is , Request you to please guide for the same
      
      19:28:51,103 INFO   (http-/10.40.130.87:8080-1) [2017-05-16
      19:28:51,103] DEBUG http-/10.40.130.87:8080-1 - constructing client key
      negotiation context.
      
      19:28:53,762 INFO   (http-/10.40.130.87:8080-1) [2017-05-16
      19:28:53,762] ERROR http-/10.40.130.87:8080-1 - Error in processing Authn
      request: Cannot support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently
      installed providers
      
      19:28:53,762 ERROR
      (http-/10.40.130.87:8080-1) Error in processing Authn request: Cannot
      support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed
      providers
      19:28:53,763 INFO   (http-/10.40.130.87:8080-1) [2017-05-16
      19:28:53,763] ERROR http-/10.40.130.87:8080-1 - Error in initial
      AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot
      support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed
      providers
      
      19:28:53,763 ERROR
      (http-/10.40.130.87:8080-1) Error in initial AuthnReq/Rsp for
      serverTime.Error in processing Authn request: Cannot support
      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
      19:28:53,764 INFO   (http-/10.40.130.87:8080-1) Can't create api:
      com.rsa.authagent.authapi.AuthAgentException: Error in initial
      AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot
      support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed
      providers
      
      19:28:53,764 INFO   (http-/10.40.130.87:8080-1)
      
      19:28:53,765 ERROR (http-/10.40.130.87:8080-1)
      com.rsa.authagent.authapi.AuthAgentException:
      com.rsa.authagent.authapi.AuthAgentException: Error in initial
      AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot
      support TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA with currently installed
      providers
      
      Thanks and Regards
      Mridula Nainani
      Like • Show 0 Likes0
      Actions
      - Ted Barbour @ mridula nainani on May 16, 2017 11:09 AM
        Unmark Correct
        Correct Answer
        Did you follow the Dev Guide instructions concerning java security policy files?
        If you have already done this, I would recommend opening a support case to troubleshoot further.
        
        Configure Message Key Negotiation
        To configure message key negotiation, you must copy RSA JSafe jar files and download policy files to utilize the encryption and decryption functionalities of the JCE framework.
        1.     From the <kit_root>/lib folder, copy certj-6.1.jar, sslj-6.1.0.1.jar, cryptojce-6.1.3.3.jar, cryptojcommon-6.1.3.3.jar, and jcmFIPS-6.1.3.3.jar to the following location.
        o    <JAVA_HOME>/jre/lib/ext/
        2.     Edit the <JAVA_HOME>/jre/lib/security/java.security file so that the two RSA security providers are listed first.
        o    security.provider.1=com.rsa.jsafe.provider.JsafeJCE
        security.provider.2=com.rsa.jsse.JsseProvider
        3.     To use the encryption and decryption functionalities of the JCE framework without any limitation, download the policy jar files for your Java virtual machine (JVM).
        o    If you are using the Oracle JDK 1.6, download the JCE Unlimited Strength Jurisdiction Policy Files 6.
        http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html
        o    If you are using the Oracle JDK 1.7 or OpenJDK 1.7, download the JCE Unlimited Strength Jurisdiction Policy Files 7.
        http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html
        o    If you are using the Oracle JDK 1.8, download the JCE Unlimited Strength Jurisdiction Policy Files 8.
        http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html
        4.     Unzip the policy jar files, and copy the unlimited policy files US_export_policy.jar and local_policy.jar to the lib/security folder of the JDK installation. For example:
        o    <JAVA_HOME>/jre/lib/security directory
        
        1 person found this helpful
        Like • Show 1 Like1
        Actions
        mridula nainani @ Ted Barbour on May 17, 2017 9:39 AM
        Mark Correct
        Correct Answer
        Thanks Ted issue is now resolved
        Like • Show 1 Like1
        Actions
Piers Bowness May 12, 2017 9:06 AM
Mark Correct
Correct Answer
Hi Mridula,
Another option you might consider would be to look at the new RSA SecurID Authentication API. This is a REST-based interface available in AM 8.2 SP1 and is based on a OpenAPI interface specification. The OpenAPI interface specification is posted at DOC-71396 - RSA SecurID Authentication API Definition. This allows customers to generate client language bindings in a variety of different languages by importing the interface definitions (including Java!).

Note: RSA Authentication Manager AM 8.2 SP1 is required and the REST authentication service must be enabled in the System Settings interface.
Like • Show 1 Like1
Actions