KB-1810 When adding SAML Identity Provider, PEM file upload fails because org.bouncycastle class overrides final method

Jordan Horwat — Tue, 27 Nov 2018 10:56:08 GMT

Current Revision posted to Appian Knowledge Base by Jordan Horwat on 11/27/2018 10:56:08 AM

Symptoms

While configuring SAML from the Admin Console, the user sees the following error when attempting to upload the PEM file:

Following corresponding errors are printed in the application server log:

ERROR com.appiancorp.rest.shared.AppianExceptionMapper - Internal Server Error on REST API invocation.
com.appiancorp.exceptions.LocalizedAppianRuntimeException$LocalizedAppianException: Expression evaluation error at function a!adminRouter: An error occurred while executing a save: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z (APNX-1-4198-019)

For JBoss, server.log is located in the <JBOSS_HOME>/standalone/log directory. For Tomcat, tomcat-stdOut.log file is located in the <APPIAN_HOME>/log directory.

Cause

This issue presents itself when there are custom versions of the Bouncy Castle classes in the environment which conflict with Appian.

Action

Ensure that there are no custom classes or JARs deployed in the environment.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: November 2018

Tags: SAML, authentication, infrastructure

KB-1810 Adding SAML Identity Provider fails because org.bouncycastle class overrides final method

Jordan Horwat — Tue, 27 Nov 2018 15:54:14 GMT

Revision 10 posted to Appian Knowledge Base by Jordan Horwat on 11/27/2018 3:54:14 PM

Symptoms

While configuring SAML from the Admin Console, the user sees the following error when attempting to upload the PEM file:

Following corresponding errors are printed in the application server log:

ERROR com.appiancorp.rest.shared.AppianExceptionMapper - Internal Server Error on REST API invocation.
com.appiancorp.exceptions.LocalizedAppianRuntimeException$LocalizedAppianException: Expression evaluation error at function a!adminRouter: An error occurred while executing a save: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z (APNX-1-4198-019)

For JBoss, server.log is located in the <JBOSS_HOME>/standalone/log directory. For Tomcat, tomcat-stdOut.log file is located in the <APPIAN_HOME>/log directory.

Cause

This issue presents itself when there are custom versions of the Bouncy Castle classes in the environment which conflict with Appian.

Action

Ensure that there are no custom classes or JARs deployed in the environment.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

KB-1810 When adding SAML Identity Provider, PEM file upload fails because org.bouncycastle class overrides final method

Jordan Horwat — Tue, 27 Nov 2018 10:55:18 GMT

Revision 11 posted to Appian Knowledge Base by Jordan Horwat on 11/27/2018 10:55:18 AM

Symptoms

While configuring SAML from the Admin Console, the user sees the following error when attempting to upload the PEM file:

Following corresponding errors are printed in the application server log:

ERROR com.appiancorp.rest.shared.AppianExceptionMapper - Internal Server Error on REST API invocation.
com.appiancorp.exceptions.LocalizedAppianRuntimeException$LocalizedAppianException: Expression evaluation error at function a!adminRouter: An error occurred while executing a save: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z (APNX-1-4198-019)

For JBoss, server.log is located in the <JBOSS_HOME>/standalone/log directory. For Tomcat, tomcat-stdOut.log file is located in the <APPIAN_HOME>/log directory.

Cause

This issue presents itself when there are custom versions of the Bouncy Castle classes in the environment which conflict with Appian.

Action

Ensure that there are no custom classes or JARs deployed in the environment.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

KB-1810 Adding SAML Identity Provider fails because org.bouncycastle class overrides final method

Jordan Horwat — Tue, 27 Nov 2018 10:54:14 GMT

Revision 9 posted to Appian Knowledge Base by Jordan Horwat on 11/27/2018 10:54:14 AM

Symptoms

While configuring SAML from the Admin Console, the user sees the following error when attempting to upload the PEM file:

Following corresponding errors are printed in the application server log:

ERROR com.appiancorp.rest.shared.AppianExceptionMapper - Internal Server Error on REST API invocation.
com.appiancorp.exceptions.LocalizedAppianRuntimeException$LocalizedAppianException: Expression evaluation error at function a!adminRouter: An error occurred while executing a save: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z (APNX-1-4198-019)

For JBoss, server.log is located in the <JBOSS_HOME>/standalone/log directory. For Tomcat, tomcat-stdOut.log file is located in the <APPIAN_HOME>/log directory.

Cause

This issue presents itself when there are custom versions of the Bouncy Castle classes in the environment which conflict with Appian.

Action

Ensure that there are no custom classes or JARs deployed in the environment.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

DRAFT KB-XXXX Adding SAML Identity Provider fails because of org.bouncycastle class overrides final method

Tom Ryan — Mon, 26 Nov 2018 20:23:00 GMT

Revision 8 posted to Appian Knowledge Base by Tom Ryan on 11/26/2018 8:23:00 PM

Symptoms

While configuring SAML from the Admin Console, the user sees the following error when attempting to upload the PEM file:

Following corresponding errors are printed in the application server log:

INFO [ajp-nio-8009-exec-7] org.apache.catalina.core.StandardWrapperValve.invoke 2018-10-24 19:31:22,329 [ajp-nio-8009-exec-7] ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <IP Address> to / 
... 
Caused by: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z

For JBoss, server.log is located in the <JBOSS_HOME>/standalone/log directory. For Tomcat, tomcat-stdOut.log file is located in the <APPIAN_HOME>/log directory.

Cause

This issue presents itself when there are custom versions of the Bouncy Castle classes in the environment which conflict with Appian.

Action

Ensure that there are no custom classes or JARs deployed in the environment.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

DRAFT KB-XXXX Adding SAML Identity Provider fails because of org.bouncycastle class overrides final method

Anirudh Rathi — Mon, 29 Oct 2018 19:51:09 GMT

Revision 1 posted to Appian Knowledge Base by Anirudh Rathi on 10/29/2018 7:51:09 PM

Symptoms

While configuring SAML from the admin console, after uploading the PEM file, the user sees the following error on the browser:

Following corresponding errors are printed in the application server logs:

INFO [ajp-nio-8009-exec-7] org.apache.catalina.core.StandardWrapperValve.invoke 2018-10-24 19:31:22,329 [ajp-nio-8009-exec-7] ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <IP Address> to / ... Caused by: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z

For JBoss server.log is located in <JBOSS_HOME>/standalone/log directory, for tomcat tomcat-stdOut.log file is located under <APPIAN_HOME>/log directory.

Cause

This issue presents itself when a copy of the bouncy castle JAR causes classpath conflicts with Appian's bouncy castle JAR implementation.

Action

Ensure that there is no classpath conflict between the two copies of the bouncy castle JAR files.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

DRAFT KB-XXXX Adding SAML Identity Provider fails because of org.bouncycastle class overrides final method

Jordan Horwat — Mon, 29 Oct 2018 16:44:52 GMT

Revision 7 posted to Appian Knowledge Base by Jordan Horwat on 10/29/2018 4:44:52 PM

Symptoms

While configuring SAML from the Admin Console, the user sees the following error when attempting to upload the PEM file:

Following corresponding errors are printed in the application server log:

INFO [ajp-nio-8009-exec-7] org.apache.catalina.core.StandardWrapperValve.invoke 2018-10-24 19:31:22,329 [ajp-nio-8009-exec-7] ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <IP Address> to / 
... 
Caused by: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z

For JBoss, server.log is located in the <JBOSS_HOME>/standalone/log directory. For Tomcat, tomcat-stdOut.log file is located in the <APPIAN_HOME>/log directory.

Cause

This issue presents itself when a copy of the bouncy castle JAR causes classpath conflicts with Appian's bouncy castle JAR implementation.

Action

Ensure that there is no classpath conflict between the two copies of the bouncy castle JAR files.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

DRAFT KB-XXXX Adding SAML Identity Provider fails because of org.bouncycastle class overrides final method

Jordan Horwat — Mon, 29 Oct 2018 16:44:15 GMT

Revision 6 posted to Appian Knowledge Base by Jordan Horwat on 10/29/2018 4:44:15 PM

Symptoms

While configuring SAML from the Admin Console, the user sees the following error when attempting to upload the PEM file:

Following corresponding errors are printed in the application server log:

INFO [ajp-nio-8009-exec-7] org.apache.catalina.core.StandardWrapperValve.invoke 2018-10-24 19:31:22,329 [ajp-nio-8009-exec-7] ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <IP Address> to / 
... 
Caused by: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z

For JBoss, server.log is located in <JBOSS_HOME>/standalone/log directory, for tomcat tomcat-stdOut.log file is located in <APPIAN_HOME>/log directory.

Cause

This issue presents itself when a copy of the bouncy castle JAR causes classpath conflicts with Appian's bouncy castle JAR implementation.

Action

Ensure that there is no classpath conflict between the two copies of the bouncy castle JAR files.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

DRAFT KB-XXXX Adding SAML Identity Provider fails because of org.bouncycastle class overrides final method

Anirudh Rathi — Mon, 29 Oct 2018 16:35:29 GMT

Revision 5 posted to Appian Knowledge Base by Anirudh Rathi on 10/29/2018 4:35:29 PM

Symptoms

While configuring SAML from the admin console the user sees the following error on the browser after uploading the PEM file :

Following corresponding errors are printed in the application server logs:

INFO [ajp-nio-8009-exec-7] org.apache.catalina.core.StandardWrapperValve.invoke 2018-10-24 19:31:22,329 [ajp-nio-8009-exec-7] ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <IP Address> to / 
... 
Caused by: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z

For JBoss, server.log is located in <JBOSS_HOME>/standalone/log directory, for tomcat tomcat-stdOut.log file is located in <APPIAN_HOME>/log directory.

Cause

This issue presents itself when a copy of the bouncy castle JAR causes classpath conflicts with Appian's bouncy castle JAR implementation.

Action

Ensure that there is no classpath conflict between the two copies of the bouncy castle JAR files.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

DRAFT KB-XXXX Adding SAML Identity Provider fails because of org.bouncycastle class overrides final method

Anirudh Rathi — Mon, 29 Oct 2018 16:34:45 GMT

Revision 4 posted to Appian Knowledge Base by Anirudh Rathi on 10/29/2018 4:34:45 PM

Symptoms

While configuring SAML from the admin console the user sees the following error on the browser after uploading the PEM file :

Following corresponding errors are printed in the application server logs:

INFO [ajp-nio-8009-exec-7] org.apache.catalina.core.StandardWrapperValve.invoke 2018-10-24 19:31:22,329 [ajp-nio-8009-exec-7] ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <IP Address> to / ... Caused by: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z

For JBoss, server.log is located in <JBOSS_HOME>/standalone/log directory, for tomcat tomcat-stdOut.log file is located in <APPIAN_HOME>/log directory.

Cause

This issue presents itself when a copy of the bouncy castle JAR causes classpath conflicts with Appian's bouncy castle JAR implementation.

Action

Ensure that there is no classpath conflict between the two copies of the bouncy castle JAR files.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

DRAFT KB-XXXX Adding SAML Identity Provider fails because of org.bouncycastle class overrides final method

Anirudh Rathi — Mon, 29 Oct 2018 16:05:56 GMT

Revision 3 posted to Appian Knowledge Base by Anirudh Rathi on 10/29/2018 4:05:56 PM

Symptoms

While configuring SAML from the admin console after uploading the PEM file, the user sees the following error on the browser:

Following corresponding errors are printed in the application server logs:

INFO [ajp-nio-8009-exec-7] org.apache.catalina.core.StandardWrapperValve.invoke 2018-10-24 19:31:22,329 [ajp-nio-8009-exec-7] ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <IP Address> to / ... Caused by: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z

For JBoss, server.log is located in <JBOSS_HOME>/standalone/log directory, for tomcat tomcat-stdOut.log file is located in <APPIAN_HOME>/log directory.

Cause

This issue presents itself when a copy of the bouncy castle JAR causes classpath conflicts with Appian's bouncy castle JAR implementation.

Action

Ensure that there is no classpath conflict between the two copies of the bouncy castle JAR files.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure

DRAFT KB-XXXX Adding SAML Identity Provider fails because of org.bouncycastle class overrides final method

Anirudh Rathi — Mon, 29 Oct 2018 16:04:09 GMT

Revision 2 posted to Appian Knowledge Base by Anirudh Rathi on 10/29/2018 4:04:09 PM

Symptoms

While configuring SAML from the admin console after uploading the PEM file, the user sees the following error on the browser:

Following corresponding errors are printed in the application server logs:

INFO [ajp-nio-8009-exec-7] org.apache.catalina.core.StandardWrapperValve.invoke 2018-10-24 19:31:22,329 [ajp-nio-8009-exec-7] ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <IP Address> to / ... Caused by: java.lang.VerifyError: class org.bouncycastle.asn1.ASN1Primitive overrides final method equals.(Ljava/lang/Object;)Z

For JBoss server.log is located in <JBOSS_HOME>/standalone/log directory, for tomcat tomcat-stdOut.log file is located in <APPIAN_HOME>/log directory.

Cause

This issue presents itself when a copy of the bouncy castle JAR causes classpath conflicts with Appian's bouncy castle JAR implementation.

Action

Ensure that there is no classpath conflict between the two copies of the bouncy castle JAR files.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: October 2018

Tags: SAML, authentication, infrastructure