Java Manager not starting after upgrade

Products

• CA Automic Dollar Universe

Issue/Introduction

On an instance of Dollar Universe using SSL communication and with the Java Manager activated, the Java Manager does not start after the instance is upgraded.

The Java Manager log shows the following error message:

JavaManager Startup
Loading DUAS Configuration
Loading LOG4J
The manager's initialization process has failed.
 

com.orsyp.UniverseException: SSL configuration failure
        at com.orsyp.mgr4java.engine.JavaManagerServer.init(JavaManagerServer.java:102)
        at com.orsyp.mgr4java.engine.JavaManagerServer.main(JavaManagerServer.java:48)
 

| 2024-04-26 11:59:46 |ERROR| main | com.orsyp.mgr4java.engine.JavaManagerServer | Unable to set the SSL configuration
javax.crypto.IllegalBlockSizeException: Input length not multiple of 8 bytes
              at com.sun.crypto.provider.CipherCore.finalNoPadding(CipherCore.java:1109) ~[sunjce_provider.jar:1.8.0_402]
              at com.sun.crypto.provider.CipherCore.fillOutputBuffer(CipherCore.java:1053) ~[sunjce_provider.jar:1.8.0_402]
              at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:853) ~[sunjce_provider.jar:1.8.0_402]
              at com.sun.crypto.provider.DESedeCipher.engineDoFinal(DESedeCipher.java:294) ~[sunjce_provider.jar:1.8.0_402]
              at javax.crypto.Cipher.doFinal(Cipher.java:2168) ~[?:1.8.0_402]
              at com.orsyp.mgr4java.crypto.CertificateConverter.decryptPrivateKeyPassphrase(CertificateConverter.java:123) ~[manager4java.jar:?]
              at com.orsyp.mgr4java.crypto.CertificateConverter.createSSLstores(CertificateConverter.java:183) ~[manager4java.jar:?]
              at com.orsyp.mgr4java.engine.JavaManagerServer.initSSLConfiguration(JavaManagerServer.java:249) ~[manager4java.jar:?]
              at com.orsyp.mgr4java.engine.JavaManagerServer.init(JavaManagerServer.java:99) [manager4java.jar:?]
              at com.orsyp.mgr4java.engine.JavaManagerServer.main(JavaManagerServer.java:48) [manager4java.jar:?]

 

Environment

DUAS + SSL + Java Manager

Cause

The encryption length and hash of the used certificates cause this.

Resolution

The default setting of 'unissl' uses RSA encryption with 1024-bit key length and MD5 hash.

Workaround:

Replacing the certificates using RSA with a 4096-bit key length and SHA512 hash solves the issue.

Encryption levels in between e.g. RSA 2048 or SHA256 might also work this was not extensively tested.