| Products | Versions |
|---|---|
| Spotfire Server | ALL |
The newer Tomcat versions handle URL encoding differently compared to earlier releases. This causes certain OCSP certificate validation requests from Spotfire Node Manager to be rejected, leading to startup failures. A similar error will be seen in the node manager logs.
=====
java.lang.IllegalArgumentException: Illegal base64 character 25
...
web.controller.IllegalArgumentExceptionHandler: Exception for /spotfire/nodemanager/trust/ocsp/...
========
All
To fix the issue:
Step 1] Disable the use of the local OCSP proxy in Node Manager by following the steps below
===================================
1. Navigate to the directory tsnm\<version>\nm\ directory.
2. Open the winsw.xml for Editing
3. Add the following line inside the <service> block:
<env name="JAVA_OPTS" value="-Dspotfire.ocsp.use-local-proxy=false"/>
4. Save the winsw.xml File.
=======================================
Step 2] Fix solidusHandling settings for proper request decoding
===================================
1. config export-config
2. config set-config-prop --name="security.trust.registration-connector.attributes.solidusHandling.key" --value="encodedSolidusHandling"
3. config set-config-prop --name="security.trust.registration-connector.attributes.solidusHandling.value" --value="decode"
4. config import-config -c "tomcat changes"
5. Restart the Spotfire server
===============================
After upgrading Apache Tomcat to version 10.1.24 and later, Spotfire Node Managers and/or services such as Web Player and Python/TERR may fail to come online.
Doc: export-config
https://docs.tibco.com/pub/spotfire_server/latest/doc/html/TIB_sfire_server_tsas_admin_help/server/topics/export-config.html
Doc: import-config
https://docs.tibco.com/pub/spotfire_server/latest/doc/html/TIB_sfire_server_tsas_admin_help/server/topics/import-config.html
Doc: set-config-prop
https://docs.tibco.com/pub/spotfire_server/latest/doc/html/TIB_sfire_server_tsas_admin_help/server/topics/set-config-prop.html
KB: How to set a Java system property on the Spotfire Node Manager Java process
https://support.tibco.com/external/article?articleUrl=How-to-set-a-Java-system-property-on-the-Spotfire-Node-Manager-Java-process