Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8285774

java.lang.RuntimeException: invalid key or spec in GCM mode

    XMLWordPrintable

    Details

      Description

      ADDITIONAL SYSTEM INFORMATION :
      Debian linux

      A DESCRIPTION OF THE PROBLEM :

      we are deploying application in the cloud. When we do the deployment, i am getting below error frequently and my kubernetes pod is getting restarted.

      If I use "jre:8u242" openjdk version, I dont see this issue. But in the latest 1.8 patch version like "jre:8u302" I am seeing this issue.

      Please give some guidelines to fix this issue.

      Error Stacktrace:

      2022-04-18 15:10:52,717 [][][] WARN internal.WatchConnectionManager [OkHttp https://10.96.0.1/...] - Exec Failure
      java.lang.RuntimeException: invalid key or spec in GCM mode
              at sun.security.ssl.SSLCipher$T12GcmWriteCipherGenerator$GcmWriteCipher.encrypt(SSLCipher.java:1703) ~[?:1.8.0_302]
              at sun.security.ssl.OutputRecord.t10Encrypt(OutputRecord.java:411) ~[?:1.8.0_302]
              at sun.security.ssl.OutputRecord.encrypt(OutputRecord.java:347) ~[?:1.8.0_302]
              at sun.security.ssl.SSLSocketOutputRecord.encodeAlert(SSLSocketOutputRecord.java:78) ~[?:1.8.0_302]
              at sun.security.ssl.TransportContext.fatal(TransportContext.java:355) ~[?:1.8.0_302]
              at sun.security.ssl.TransportContext.fatal(TransportContext.java:267) ~[?:1.8.0_302]
              at sun.security.ssl.TransportContext.fatal(TransportContext.java:262) ~[?:1.8.0_302]
              at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1563) ~[?:1.8.0_302]
              at sun.security.ssl.SSLSocketImpl.access$400(SSLSocketImpl.java:73) ~[?:1.8.0_302]
              at sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:973) ~[?:1.8.0_302]
              at okio.Okio$2.read(Okio.java:138) ~[okio-1.11.0.jar!/:?]
              at okio.AsyncTimeout$2.read(AsyncTimeout.java:236) ~[okio-1.11.0.jar!/:?]
              at okio.RealBufferedSource.request(RealBufferedSource.java:66) ~[okio-1.11.0.jar!/:?]
              at okio.RealBufferedSource.require(RealBufferedSource.java:59) ~[okio-1.11.0.jar!/:?]
              at okio.RealBufferedSource.readByte(RealBufferedSource.java:72) ~[okio-1.11.0.jar!/:?]
              at okhttp3.internal.ws.WebSocketReader.readHeader(WebSocketReader.java:113) ~[okhttp-3.6.0.jar!/:?]
              at okhttp3.internal.ws.WebSocketReader.processNextFrame(WebSocketReader.java:97) ~[okhttp-3.6.0.jar!/:?]
              at okhttp3.internal.ws.RealWebSocket.loopReader(RealWebSocket.java:262) [okhttp-3.6.0.jar!/:?]
              at okhttp3.internal.ws.RealWebSocket$2.onResponse(RealWebSocket.java:201) [okhttp-3.6.0.jar!/:?]
              at okhttp3.RealCall$AsyncCall.execute(RealCall.java:135) [okhttp-3.6.0.jar!/:?]
              at okhttp3.internal.NamedRunnable.run(NamedRunnable.java:32) [okhttp-3.6.0.jar!/:?]
              at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_302]
              at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_302]
              at java.lang.Thread.run(Thread.java:748) [?:1.8.0_302]
      Caused by: java.security.InvalidKeyException: Could not initialize cipher
              at sun.security.pkcs11.P11AEADCipher.implInit(P11AEADCipher.java:330) ~[sunpkcs11.jar:1.8.0_302]
              at sun.security.pkcs11.P11AEADCipher.engineInit(P11AEADCipher.java:248) ~[sunpkcs11.jar:1.8.0_302]
              at javax.crypto.Cipher.init(Cipher.java:1397) ~[?:1.8.0_302]
              at sun.security.ssl.SSLCipher$T12GcmWriteCipherGenerator$GcmWriteCipher.encrypt(SSLCipher.java:1699) ~[?:1.8.0_302]
              ... 23 more
      Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_OPERATION_ACTIVE
              at sun.security.pkcs11.wrapper.PKCS11.C_EncryptInit(Native Method) ~[sunpkcs11.jar:1.8.0_302]
              at sun.security.pkcs11.P11AEADCipher.initialize(P11AEADCipher.java:404) ~[sunpkcs11.jar:1.8.0_302]
              at sun.security.pkcs11.P11AEADCipher.implInit(P11AEADCipher.java:328) ~[sunpkcs11.jar:1.8.0_302]
              at sun.security.pkcs11.P11AEADCipher.engineInit(P11AEADCipher.java:248) ~[sunpkcs11.jar:1.8.0_302]
              at javax.crypto.Cipher.init(Cipher.java:1397) ~[?:1.8.0_302]
              at sun.security.ssl.SSLCipher$T12GcmWriteCipherGenerator$GcmWriteCipher.encrypt(SSLCipher.java:1699) ~[?:1.8.0_302]
              ... 23 more

      REGRESSION : Last worked in version 8


      FREQUENCY : always


        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              webbuggrp Webbug Group
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated: