OneClick tomcat service fails with error "fips mode not supported"

Products

• Network Observability
• Spectrum

Issue/Introduction

The Spectrum OneClick tomcat web server service fails to start and stay running.

After an upgrade the tomcat web server service fails to stay running.

Trying to enable FIPS in Tomcat results in error "libcrypto routines:FIPS_mode_set:fips mode not supported"

The $SPECROOT/tomcat/log/catalina.out file shows an error message:

java.lang.Exception: error:0F06D065:common libcrypto routines:FIPS_mode_set:fips mode not supported
...
2024-12-12 15:30:08,834 [main] FATAL org.apache.catalina.core.AprLifecycleListener - Failed to enter FIPS mode
java.lang.Error: Failed to enter FIPS mode
...
2024-12-12 15:30:08,834 [main] ERROR org.apache.catalina.startup.Catalina - Error initializing Catalina
org.apache.catalina.LifecycleException: Failed to initialize component [StandardServer[-1]]
...
Caused by: java.lang.Error: Failed to enter FIPS mode

Environment

All supported Network Observability DX NetOps Spectrum releases

Cause

The OS has fips enabled.

Resolution

To resolve this we'll modify the LD_LIBRARY_PATH in the $SPECROOT/tomcat/bin/catalina.sh script.

Open the script for editing. Find the LD_LIBRARY_PATH variable in the following section as seen here from a default system.

Text version:

# where all WebApps runtime libraries are located
LD_LIBRARY_PATH=/opt/SPECTRUM/lib
export LD_LIBRARY_PATH

Modify the variable value by adding /lib64 as follows:

Text version:

# where all WebApps runtime libraries are located
LD_LIBRARY_PATH=/lib64:/opt/SPECTRUM/lib
export LD_LIBRARY_PATH

Note: DO NOT edit the LD_LIBRARY_PATH reference in the if statement a few lines below the target section.

Save the changes to the file. Stop and then restart the tomcat web server service.