Error creating bean with name 'cryptoInit' defined in class path resource

Products

• CA API Gateway

Issue/Introduction

After upgrading the gateway, the services will not start due to the following error:

2025-10-14T13:43:00.587-0400 WARNING 1 STDERR: Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.reflect.InaccessibleObjectException: Unable to make sun.security.ec.ECPublicKeyImpl(byte[]) throws java.security.InvalidKeyException accessible: module jdk.crypto.ec does not "opens sun.security.ec" to unnamed module @1dbf9dc7 [in thread "main"]
.
.
.
.
2025-10-14T13:43:00.606-0400 WARNING 1 STDERR:     ... 8 more
2025-10-14T13:43:00.606-0400 WARNING 1 STDERR: 

**** Unable to start the server: Error starting server : Error creating bean with name 'cryptoInit' defined in class path resource [com/l7tech/server/resources/ssgApplicationContext.xml]: Bean instantiation via constructor failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.l7tech.server.security.CryptoInitializer]: Constructor threw exception; nested exception is java.lang.NoClassDefFoundError: Could not initialize class com.l7tech.common.io.CertUtils

Environment

API Gateway 11.1.2 
Software Appliance

Resolution

1. Verify the permissions on the /opt/SecureSpan/Gateway/runtime/etc/profile.d/ssgruntimedefs.sh file. It should be owned by layer7:layer7. if the permissions are not correct, a new file called ssgruntimedefs.sh.rpmnew will get created but will not be used in the startup of the gateway.

-rwxr-xr-x. 1 gateway gateway 1160 Dec 13  2016 ssgruntimedefs.sh
-r-xr-xr-x. 1 layer7  layer7  5707 Mar 21  2025 ssgruntimedefs.sh.rpmnew

2. Edit the ssgruntimedefs.sh file and added the following two lines:

default_java_opts="$default_java_opts --add-exports java.xml.crypto/com.sun.org.apache.xml.internal.security=ALL-UNNAMED"
default_java_opts="$default_java_opts --add-opens jdk.crypto.ec/sun.security.ec=ALL-UNNAMED"

3. Restart the gateway service