Project

General

Profile

Actions
Copy link

Bug #15123

closed

Internal Server Error when running JRE report

Added by Peter Souter over 8 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

DEBUG: running: oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_stig-java-upstream --results-arf /tmp/d20160522-28265-12v0hcw/results.xml /var/lib/openscap/content/0c90c8cf515ad62e5415a9f81c65a1810b6be2333a0fc382310273d7209e1068.xml
DEBUG: running: /usr/bin/bzip2 /tmp/d20160522-28265-12v0hcw/results.xml
Uploading results to https://foremantesting.vm:8443/compliance/arf/5
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN">
<HTML>
  <HEAD><TITLE>Internal Server Error</TITLE></HEAD>
  <BODY>
    <H1>Internal Server Error</H1>
    undefined method `join' for #&lt;String:0x000000029eceb8&gt;
    <HR>
    <ADDRESS>
     WEBrick/1.3.1 (Ruby/2.0.0/2014-11-13) OpenSSL/1.0.1e at
     foremantesting.vm:8443
    </ADDRESS>
  </BODY>
</HTML>
Upload failed: 500 "Internal Server Error "

When I run the crontab job manually I get the following:

oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_stig-java-upstream --results-arf /tmp/d20160522-28319-kwqn3l/results.xml /var/lib/openscap/content/0c90c8cf515ad62e5415a9f81c65a1810b6be2333a0fc382310273d7209e1068.xml
Title   The Java Configuration File Exists
Rule    xccdf_org.ssgproject.content_rule_java_jre_deployment_config_exists
Ident   CCE-
Ident   JRE0070-UX
Result  fail

Title   Configure the deployment.properties File Path
Rule    xccdf_org.ssgproject.content_rule_java_jre_deployment_config_properties
Ident   CCE-
Ident   JRE0060-UX
Result  fail

Title   Configure The Java Deployment Mandatory Setting
Rule    xccdf_org.ssgproject.content_rule_java_jre_deployment_config_mandatory
Ident   CCE-
Ident   JRE0060-UX
Result  fail

Title   The Java Properties File Exists
Rule    xccdf_org.ssgproject.content_rule_java_jre_deployment_properties_exists
Ident   CCE-
Ident   JRE0080-UX
Result  fail

Title   Disable Java Execution From Untrusted Sources
Rule    xccdf_org.ssgproject.content_rule_java_jre_untrusted_sources
Ident   CCE-
Ident   JRE0001-UX
Result  fail

Title   Disable User Access to Untrusted Sources Settings
Rule    xccdf_org.ssgproject.content_rule_java_jre_untrusted_sources_locked
Ident   CCE-
Ident   JRE0010-UX
Result  fail

Title   Enable Revocation Checks for Publisher Certificates
Rule    xccdf_org.ssgproject.content_rule_java_jre_validation_crl
Ident   CCE-
Ident   JRE0020-UX
Result  fail

Title   Disable User Access to Revocation Check Settings
Rule    xccdf_org.ssgproject.content_rule_java_jre_validation_crl_locked
Ident   CCE-
Ident   JRE0030-UX
Result  fail

Title   Enable Online Certificate Validation
Rule    xccdf_org.ssgproject.content_rule_java_jre_validation_ocsp
Ident   CCE-
Ident   JRE0040-UX
Result  fail

Title   Disable User Access to Online Certificate Validation Settings
Rule    xccdf_org.ssgproject.content_rule_java_jre_validation_ocsp_locked
Ident   CCE-
Ident   JRE0050-UX
Result  fail

Title   Ensure Java Patches Installed
Rule    xccdf_org.ssgproject.content_rule_java_jre_updated
Ident   CCE-
Ident   JRE0090-UX
Result  notchecked

I/O error : No such file or directory
I/O error : No such file or directory
OpenSCAP Error: Failed to save the result datastream to '/tmp/d20160522-28319-kwqn3l/results.xml'. [rds.c:852]

I'm guessing I missed a step somewhere, but I followed the instructions in the docs exactly...

Actions
Copy link
 #1

Updated by Peter Souter over 8 years ago

Ok, looks like the error is that the result directory doesn't exist:

oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_stig-java-upstream --results-arf /tmp/results.xml /var/lib/openscap/content/0c90c8cf515ad62e5415a9f81c65a1810b6be2333a0fc382310273d7209e1068.xml

Title   The Java Configuration File Exists
Rule    xccdf_org.ssgproject.content_rule_java_jre_deployment_config_exists
Ident   CCE-
Ident   JRE0070-UX
Result  fail

Title   Configure the deployment.properties File Path
Rule    xccdf_org.ssgproject.content_rule_java_jre_deployment_config_properties
Ident   CCE-
Ident   JRE0060-UX
Result  fail

Title   Configure The Java Deployment Mandatory Setting
Rule    xccdf_org.ssgproject.content_rule_java_jre_deployment_config_mandatory
Ident   CCE-
Ident   JRE0060-UX
Result  fail

Title   The Java Properties File Exists
Rule    xccdf_org.ssgproject.content_rule_java_jre_deployment_properties_exists
Ident   CCE-
Ident   JRE0080-UX
Result  fail

Title   Disable Java Execution From Untrusted Sources
Rule    xccdf_org.ssgproject.content_rule_java_jre_untrusted_sources
Ident   CCE-
Ident   JRE0001-UX
Result  fail

Title   Disable User Access to Untrusted Sources Settings
Rule    xccdf_org.ssgproject.content_rule_java_jre_untrusted_sources_locked
Ident   CCE-
Ident   JRE0010-UX
Result  fail

Title   Enable Revocation Checks for Publisher Certificates
Rule    xccdf_org.ssgproject.content_rule_java_jre_validation_crl
Ident   CCE-
Ident   JRE0020-UX
Result  fail

Title   Disable User Access to Revocation Check Settings
Rule    xccdf_org.ssgproject.content_rule_java_jre_validation_crl_locked
Ident   CCE-
Ident   JRE0030-UX
Result  fail

Title   Enable Online Certificate Validation
Rule    xccdf_org.ssgproject.content_rule_java_jre_validation_ocsp
Ident   CCE-
Ident   JRE0040-UX
Result  fail

Title   Disable User Access to Online Certificate Validation Settings
Rule    xccdf_org.ssgproject.content_rule_java_jre_validation_ocsp_locked
Ident   CCE-
Ident   JRE0050-UX
Result  fail

Title   Ensure Java Patches Installed
Rule    xccdf_org.ssgproject.content_rule_java_jre_updated
Ident   CCE-
Ident   JRE0090-UX
Result  notchecked

ll /tmp/results.xml
-rw-r--r-- 1 root root 139215 May 22 14:42 /tmp/results.xml
Actions
Copy link
 #2

Updated by Peter Souter over 8 years ago

Ok, ignore that last one, the ruby code uses `Dir.mktmpdir`, monkey patching it to a dir creates the results.xml file correctly, but still fails with `undefined method `join' for #<String:0x000000029eceb8>`

Actions
Copy link
 #3

Updated by Dominic Cleal about 8 years ago

  • Project changed from 36 to OpenSCAP
  • Triaged set to No
Actions
Copy link
 #4

Updated by Ondřej Pražák almost 3 years ago

  • Status changed from New to Closed

This is no longer an issue in the latest releases. Feel free to reopen if I am mistaken.

Actions
Copy link

Also available in: Atom PDF