Upgrade from 6.0.14 to 6.1 Guice/ErrorInjectingConstructor

Graylog Central (peer support)
1

1. Describe your incident:

Hello,

i wanted to upgrade our Instace from 6.0.14 to 6.1.15 but the Server does not come up

after that. Instead i get a bunch of Java-Errors. All is running on 1 VM.

2. Describe your environment:

  • OS Information: Debian 12.12

  • Package Version: Graylog 6.1.15, MongoDB 7.0.24, OpenSearch 2.15.0

  • Service logs, configurations, and environment variables:

  • 2025-09-17T15:10:39.537+02:00 ERROR [CmdLineTool] Startup error:
    com.google.inject.CreationException: Unable to create injector, see the following errors:

    at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
    while locating CustomCAX509TrustManager
    at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
    while locating X509TrustManager
    Caused by: NullPointerException
    at java.base/Hashtable.put(Unknown Source)
    at PKCS12KeyStoreSpi$IgnoresCaseHashtable.put(Unknown Source)
    at PKCS12KeyStoreSpi.engineSetCertificateEntry(Unknown Source)
    at AdaptingKeyStoreSpi.engineSetCertificateEntry(Unknown Source)
    at java.base/KeyStore.setCertificateEntry(Unknown Source)
    at CaTruststoreImpl.filterOutPrivateKey(CaTruststoreImpl.java:74)
    at java.base/Optional.map(Unknown Source)
    at CaTruststoreImpl.getTrustStore(CaTruststoreImpl.java:57)
    at CustomCAX509TrustManager.refresh(CustomCAX509TrustManager.java:58)
    at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:45)
    at CustomCAX509TrustManager$$FastClassByGuice$$1947d48.GUICE$TRAMPOLINE()
    at CustomCAX509TrustManager$$FastClassByGuice$$1947d48.apply()
    at DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82)
    at ConstructorInjector.provision(ConstructorInjector.java:114)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at FactoryProxy.get(FactoryProxy.java:60)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213)
    at InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186)
    at InternalInjectorCreator.build(InternalInjectorCreator.java:113)
    at Guice.createInjector(Guice.java:87)
    at Guice.createInjector(Guice.java:69)
    at Guice.createInjector(Guice.java:59)
    at ServerBootstrap.getPreflightInjector(ServerBootstrap.java:287)
    at ServerBootstrap.runPreflightWeb(ServerBootstrap.java:193)
    at ServerBootstrap.runPreFlightChecks(ServerBootstrap.java:179)
    at ServerBootstrap.beforeInjectorCreation(ServerBootstrap.java:152)
    at CmdLineTool.doRun(CmdLineTool.java:338)
    at CmdLineTool.run(CmdLineTool.java:270)
    at Main.main(Main.java:55)

    at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
    while locating CustomCAX509TrustManager
    at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
    at TrustManagerAndSocketFactoryProvider.(TrustManagerAndSocketFactoryProvider.java:37)
    _ for 1st parameter
    at TrustManagerAndSocketFactoryProvider.class(TrustManagerAndSocketFactoryProvider.java:37)
    at OkHttpClientProvider.(OkHttpClientProvider.java:75)
    _ for 5th parameter
    at OkHttpClientProvider.class(OkHttpClientProvider.java:59)
    while locating OkHttpClientProvider
    at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:46)
    while locating okhttp3.OkHttpClient

    Learn more:
    ERROR_INJECTING_CONSTRUCTOR · google/guice Wiki · GitHub
    Caused by: NullPointerException
    at java.base/Hashtable.put(Unknown Source)
    at PKCS12KeyStoreSpi$IgnoresCaseHashtable.put(Unknown Source)
    at PKCS12KeyStoreSpi.engineSetCertificateEntry(Unknown Source)
    at AdaptingKeyStoreSpi.engineSetCertificateEntry(Unknown Source)
    at java.base/KeyStore.setCertificateEntry(Unknown Source)
    at CaTruststoreImpl.filterOutPrivateKey(CaTruststoreImpl.java:74)
    at java.base/Optional.map(Unknown Source)
    at CaTruststoreImpl.getTrustStore(CaTruststoreImpl.java:57)
    at CustomCAX509TrustManager.refresh(CustomCAX509TrustManager.java:58)
    at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:45)
    at CustomCAX509TrustManager$$FastClassByGuice$$1947d48.GUICE$TRAMPOLINE()
    at CustomCAX509TrustManager$$FastClassByGuice$$1947d48.apply()
    at DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82)
    at ConstructorInjector.provision(ConstructorInjector.java:114)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at FactoryProxy.get(FactoryProxy.java:60)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at SingleParameterInjector.inject(SingleParameterInjector.java:40)
    at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
    at ConstructorInjector.provision(ConstructorInjector.java:113)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at SingleParameterInjector.inject(SingleParameterInjector.java:40)
    at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
    at ConstructorInjector.provision(ConstructorInjector.java:113)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at BoundProviderFactory.get(BoundProviderFactory.java:58)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213)
    at InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186)
    at InternalInjectorCreator.build(InternalInjectorCreator.java:113)
    at Guice.createInjector(Guice.java:87)
    at Guice.createInjector(Guice.java:69)
    at Guice.createInjector(Guice.java:59)
    at ServerBootstrap.getPreflightInjector(ServerBootstrap.java:287)
    at ServerBootstrap.runPreflightWeb(ServerBootstrap.java:193)
    at ServerBootstrap.runPreFlightChecks(ServerBootstrap.java:179)
    at ServerBootstrap.beforeInjectorCreation(ServerBootstrap.java:152)
    at CmdLineTool.doRun(CmdLineTool.java:338)
    at CmdLineTool.run(CmdLineTool.java:270)
    at Main.main(Main.java:55)

    at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
    while locating CustomCAX509TrustManager
    at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
    at TrustManagerAndSocketFactoryProvider.(TrustManagerAndSocketFactoryProvider.java:37)
    _ for 1st parameter
    at TrustManagerAndSocketFactoryProvider.class(TrustManagerAndSocketFactoryProvider.java:37)
    at OkHttpClientProvider.(OkHttpClientProvider.java:75)
    _ for 5th parameter
    at OkHttpClientProvider.class(OkHttpClientProvider.java:59)
    while locating OkHttpClientProvider
    at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:46)
    at VersionProbe.(VersionProbe.java:74)
    _ for 2nd parameter
    at ElasticsearchVersionProvider.(ElasticsearchVersionProvider.java:53)
    _ for 3rd parameter
    at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:47)
    while locating ElasticsearchVersionProvider

    Learn more:
    ERROR_INJECTING_CONSTRUCTOR · google/guice Wiki · GitHub
    Caused by: NullPointerException
    at java.base/Hashtable.put(Unknown Source)
    at PKCS12KeyStoreSpi$IgnoresCaseHashtable.put(Unknown Source)
    at PKCS12KeyStoreSpi.engineSetCertificateEntry(Unknown Source)
    at AdaptingKeyStoreSpi.engineSetCertificateEntry(Unknown Source)
    at java.base/KeyStore.setCertificateEntry(Unknown Source)
    at CaTruststoreImpl.filterOutPrivateKey(CaTruststoreImpl.java:74)
    at java.base/Optional.map(Unknown Source)
    at CaTruststoreImpl.getTrustStore(CaTruststoreImpl.java:57)
    at CustomCAX509TrustManager.refresh(CustomCAX509TrustManager.java:58)
    at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:45)
    at CustomCAX509TrustManager$$FastClassByGuice$$1947d48.GUICE$TRAMPOLINE()
    at CustomCAX509TrustManager$$FastClassByGuice$$1947d48.apply()
    at DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82)
    at ConstructorInjector.provision(ConstructorInjector.java:114)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at FactoryProxy.get(FactoryProxy.java:60)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at SingleParameterInjector.inject(SingleParameterInjector.java:40)
    at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
    at ConstructorInjector.provision(ConstructorInjector.java:113)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at SingleParameterInjector.inject(SingleParameterInjector.java:40)
    at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
    at ConstructorInjector.provision(ConstructorInjector.java:113)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at BoundProviderFactory.get(BoundProviderFactory.java:58)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at SingleParameterInjector.inject(SingleParameterInjector.java:40)
    at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
    at ConstructorInjector.provision(ConstructorInjector.java:113)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at SingleParameterInjector.inject(SingleParameterInjector.java:40)
    at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
    at ConstructorInjector.provision(ConstructorInjector.java:113)
    at ConstructorInjector.construct(ConstructorInjector.java:91)
    at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
    at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
    at SingletonScope$1.get(SingletonScope.java:169)
    at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
    at InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213)
    at InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186)
    at InternalInjectorCreator.build(InternalInjectorCreator.java:113)
    at Guice.createInjector(Guice.java:87)
    at Guice.createInjector(Guice.java:69)
    at Guice.createInjector(Guice.java:59)
    at ServerBootstrap.getPreflightInjector(ServerBootstrap.java:287)
    at ServerBootstrap.runPreflightWeb(ServerBootstrap.java:193)
    at ServerBootstrap.runPreFlightChecks(ServerBootstrap.java:179)
    at ServerBootstrap.beforeInjectorCreation(ServerBootstrap.java:152)
    at CmdLineTool.doRun(CmdLineTool.java:338)
    at CmdLineTool.run(CmdLineTool.java:270)
    at Main.main(Main.java:55)

    3 errors

    ======================

    Full classname legend:

    AdaptingKeyStoreSpi: “org.bouncycastle.jcajce.provider.keystore.util.AdaptingKeyStoreSpi”

    BoundProviderFactory: “com.google.inject.internal.BoundProviderFactory”
    CaTruststoreImpl: “org.graylog.security.certutil.CaTruststoreImpl”
    CmdLineTool: “org.graylog2.bootstrap.CmdLineTool”
    ConstructorBindingImpl$Factory: “com.google.inject.internal.ConstructorBindingImpl$Factory”
    ConstructorInjector: “com.google.inject.internal.ConstructorInjector”
    CustomCAX509TrustManager: “org.graylog2.security.CustomCAX509TrustManager”
    CustomCAX509TrustManager$$FastClassByGuice$$1947d48: “org.graylog2.security.CustomCAX509TrustManager$$FastClassByGuice$$1947d48”
    DefaultConstructionProxyFactory$FastClassProxy: “com.google.inject.internal.DefaultConstructionProxyFactory$FastClassProxy”
    ElasticsearchVersionProvider: “org.graylog2.storage.providers.ElasticsearchVersionProvider”
    FactoryProxy: “com.google.inject.internal.FactoryProxy”
    Guice: “com.google.inject.Guice”
    InternalFactoryToProviderAdapter: “com.google.inject.internal.InternalFactoryToProviderAdapter”
    InternalInjectorCreator: “com.google.inject.internal.InternalInjectorCreator”
    KeyStore: “java.security.KeyStore”
    Main: “org.graylog2.bootstrap.Main”
    OkHttpClientProvider: “org.graylog2.shared.bindings.providers.OkHttpClientProvider”
    PKCS12KeyStoreSpi: “org.bouncycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi”
    PKCS12KeyStoreSpi$IgnoresCaseHashtable: “org.bouncycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi$IgnoresCaseHashtable”
    ProviderToInternalFactoryAdapter: “com.google.inject.internal.ProviderToInternalFactoryAdapter”
    ServerBootstrap: “org.graylog2.bootstrap.ServerBootstrap”
    ServerPreflightChecksModule: “org.graylog2.bootstrap.preflight.ServerPreflightChecksModule”
    SingleParameterInjector: “com.google.inject.internal.SingleParameterInjector”
    SingletonScope$1: “com.google.inject.internal.SingletonScope$1”
    TrustManagerAndSocketFactoryProvider: “org.graylog2.security.TrustManagerAndSocketFactoryProvider”
    VersionProbe: “org.graylog2.storage.versionprobe.VersionProbe”
    X509TrustManager: “javax.net.ssl.X509TrustManager”

    End of classname legend:

        at com.google.inject.internal.Errors.throwCreationExceptionIfErrorsExist(Errors.java:589) ~[graylog.jar:?]
    at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:190) ~[graylog.jar:?]
    at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:113) ~[graylog.jar:?]
    at com.google.inject.Guice.createInjector(Guice.java:87) ~[graylog.jar:?]
    at com.google.inject.Guice.createInjector(Guice.java:69) ~[graylog.jar:?]
    at com.google.inject.Guice.createInjector(Guice.java:59) ~[graylog.jar:?]
    at org.graylog2.bootstrap.ServerBootstrap.getPreflightInjector(ServerBootstrap.java:287) ~[graylog.jar:?]
    at org.graylog2.bootstrap.ServerBootstrap.runPreflightWeb(ServerBootstrap.java:193) ~[graylog.jar:?]
    at org.graylog2.bootstrap.ServerBootstrap.runPreFlightChecks(ServerBootstrap.java:179) ~[graylog.jar:?]
    at org.graylog2.bootstrap.ServerBootstrap.beforeInjectorCreation(ServerBootstrap.java:152) ~[graylog.jar:?]
    at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:338) ~[graylog.jar:?]
    at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:270) [graylog.jar:?]
    at org.graylog2.bootstrap.Main.main(Main.java:55) [graylog.jar:?]

3. What steps have you already taken to try and solve the problem?

I have tried to make a new keystore but that doesn’t make a difference…

4. How can the community help?

Any pointer in the right direction! If you need more information, please let me know!

Many thanks!