Short read of DER length

Graylog Central (peer support)
1

Has anybody seen this error before? I’m banging my head up against the wall trying to figure it out. I have the CAs imported in the cacerts file correctly. Trying to use GELF_TCP w/SSL.

java.security.cert.CertificateException: Unable to initialize, java.io.IOException: Short read of DER length
	at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:198) ~[?:1.8.0_131]
	at sun.security.provider.X509Factory.parseX509orPKCS7Cert(X509Factory.java:471) ~[?:1.8.0_131]
	at sun.security.provider.X509Factory.engineGenerateCertificates(X509Factory.java:356) ~[?:1.8.0_131]
	at java.security.cert.CertificateFactory.generateCertificates(CertificateFactory.java:462) ~[?:1.8.0_131]
	at org.graylog2.plugin.inputs.transports.util.KeyUtil.loadCertificates(KeyUtil.java:92) ~[graylog.jar:?]
	at org.graylog2.plugin.inputs.transports.util.KeyUtil.loadCertificates(KeyUtil.java:104) ~[graylog.jar:?]
	at org.graylog2.plugin.inputs.transports.util.KeyUtil.initTrustStore(KeyUtil.java:74) ~[graylog.jar:?]
	at org.graylog2.plugin.inputs.transports.AbstractTcpTransport$1.createSslEngine(AbstractTcpTransport.java:199) ~[graylog.jar:?]
	at org.graylog2.plugin.inputs.transports.AbstractTcpTransport$1.call(AbstractTcpTransport.java:186) ~[graylog.jar:?]
	at org.graylog2.plugin.inputs.transports.AbstractTcpTransport$1.call(AbstractTcpTransport.java:182) ~[graylog.jar:?]
	at org.graylog2.plugin.inputs.transports.NettyTransport$1.getPipeline(NettyTransport.java:110) ~[graylog.jar:?]
	at org.jboss.netty.channel.socket.nio.NioServerBoss.registerAcceptedChannel(NioServerBoss.java:134) [graylog.jar:?]
	at org.jboss.netty.channel.socket.nio.NioServerBoss.process(NioServerBoss.java:104) [graylog.jar:?]
	at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) [graylog.jar:?]
	at org.jboss.netty.channel.socket.nio.NioServerBoss.run(NioServerBoss.java:42) [graylog.jar:?]
	at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) [graylog.jar:?]
	at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) [graylog.jar:?]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_131]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_131]
	at java.lang.Thread.run(Thread.java:748) [?:1.8.0_131]
Caused by: java.io.IOException: Short read of DER length
	at sun.security.util.DerInputStream.getLength(DerInputStream.java:582) ~[?:1.8.0_131]
	at sun.security.util.DerValue.<init>(DerValue.java:252) ~[?:1.8.0_131]
	at sun.security.util.DerInputStream.getDerValue(DerInputStream.java:451) ~[?:1.8.0_131]
	at sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1784) ~[?:1.8.0_131]
	at sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:195) ~[?:1.8.0_131]
2

Never mind figured it out. Was pointing to the wrong CA file for the auth cert.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.