Spotfire Node Manager and/or services such as Web Player and Python/TERR fail to start after Tomcat Upgrade to version 10.1.24 and later

Spotfire Node Manager and/or services such as Web Player and Python/TERR fail to start after Tomcat Upgrade to version 10.1.24 and later

book

Article ID: KB0138003

calendar_today

Updated On:

Products Versions
Spotfire Server ALL

Description

The newer Tomcat versions handle URL encoding differently compared to earlier releases. This causes certain OCSP certificate validation requests from Spotfire Node Manager to be rejected, leading to startup failures. A similar error will be seen in the node manager logs.
=====
java.lang.IllegalArgumentException: Illegal base64 character 25
...
web.controller.IllegalArgumentExceptionHandler: Exception for /spotfire/nodemanager/trust/ocsp/...
========

Environment

All

Resolution

To fix the issue:

Step 1] Disable the use of the local OCSP proxy in Node Manager by following the steps below

===================================
1. Navigate to the directory tsnm\<version>\nm\ directory.

2. Open the winsw.xml for Editing

3. Add the following line inside the <service> block:

      <env name="JAVA_OPTS" value="-Dspotfire.ocsp.use-local-proxy=false"/>

4. Save the winsw.xml File.
=======================================

Step 2] Fix solidusHandling settings for proper request decoding

===================================
1. config export-config

2. config set-config-prop --name="security.trust.registration-connector.attributes.solidusHandling.key" --value="encodedSolidusHandling"

3. config set-config-prop --name="security.trust.registration-connector.attributes.solidusHandling.value" --value="decode"

4. config import-config -c "tomcat changes"

5. Restart the Spotfire server
===============================

Issue/Introduction

After upgrading Apache Tomcat to version 10.1.24 and later, Spotfire Node Managers and/or services such as Web Player and Python/TERR may fail to come online.

Additional Information