quarkus: Native compilation fails with MP Rest Client

Describe the bug

Create an app with the MP RestClient (or apparently also GraphQL client – see https://quarkusio.zulipchat.com/#narrow/stream/187030-users/topic/graphql.20microprofile/near/198970978 )

then try to compile this to native

This ends up in something like

Caused by: com.oracle.graal.pointsto.constraints.UnsupportedFeatureException: No instances of sun.security.provider.NativePRNG are allowed in the image heap as this class should be initialized at image runtime. To see how this object got instantiated use -H:+TraceClassInitialization.
Detailed message:
Trace: Object was reached by
	reading field java.security.SecureRandom.secureRandomSpi of
		constant java.security.SecureRandom@4fa8cb4 reached by
	reading field sun.security.ssl.SSLContextImpl.secureRandom of
		constant sun.security.ssl.SSLContextImpl$TLSContext@67cd2da reached by
	reading field sun.security.ssl.SSLSocketFactoryImpl.context of
		constant sun.security.ssl.SSLSocketFactoryImpl@7c8befbb reached by
	reading field org.apache.http.conn.ssl.SSLConnectionSocketFactory.socketfactory of
		constant org.apache.http.conn.ssl.SSLConnectionSocketFactory@652a8d99 reached by
	reading field java.util.concurrent.ConcurrentHashMap$Node.val of
		constant java.util.concurrent.ConcurrentHashMap$Node@7e52f699 reached by
	indexing into array
		constant java.util.concurrent.ConcurrentHashMap$Node[]@31ebe5c5 reached by
	reading field java.util.concurrent.ConcurrentHashMap.table of
		constant java.util.concurrent.ConcurrentHashMap@2089b9a9 reached by
	reading field org.apache.http.config.Registry.map of
		constant org.apache.http.config.Registry@61ba6f03 reached by
	reading field org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.socketFactoryRegistry of
		constant org.apache.http.impl.conn.DefaultHttpClientConnectionOperator@1e443cae reached by
	reading field org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connectionOperator of
		constant org.apache.http.impl.conn.PoolingHttpClientConnectionManager@f07065f reached by
	reading field org.apache.http.impl.client.HttpClientBuilder$2.val$cm of
		constant org.apache.http.impl.client.HttpClientBuilder$2@544a1d92 reached by
	indexing into array
		constant java.lang.Object[]@34752250 reached by
	reading field java.util.ArrayList.elementData of
		constant java.util.ArrayList@4bf1b087 reached by
	reading field org.apache.http.impl.client.InternalHttpClient.closeables of
		constant org.apache.http.impl.client.InternalHttpClient@4c454c5 reached by
	reading field org.jboss.resteasy.client.jaxrs.engines.ManualClosingApacheHttpClient43Engine.httpClient of
		constant org.jboss.resteasy.client.jaxrs.engines.ApacheHttpClient43Engine@643e52f7 reached by
	reading field org.jboss.resteasy.client.jaxrs.internal.ResteasyClientImpl.httpEngine of
		constant org.jboss.resteasy.microprofile.client.impl.MpClient@165deefb reached by
	reading field org.jboss.resteasy.microprofile.client.ProxyInvocationHandler.client of
		constant org.jboss.resteasy.microprofile.client.ProxyInvocationHandler@432dfe97 reached by
	reading field java.lang.reflect.Proxy.h of
		constant com.sun.proxy.$Proxy338@392f433f reached by
	reading field com.redhat.cloud.policies.app.auth.RbacFilter.rbac of
		constant com.redhat.cloud.policies.app.auth.RbacFilter_Subclass@38e67950 reached by
	reading field org.jboss.resteasy.core.interception.jaxrs.JaxrsInterceptorRegistryImpl$OnDemandInterceptorFactory.interceptor of
		constant org.jboss.resteasy.core.interception.jaxrs.JaxrsInterceptorRegistryImpl$OnDemandInterceptorFactory@1a2c343c reached by
	indexing into array

Expected behavior

App can be compiled to native

This is with Quarkus 1.8.2

About this issue

Original URL
State: closed
Created 4 years ago
Reactions: 1
Comments: 20 (15 by maintainers)

Most upvoted comments

I am able to force the MP Rest client to use the URLConnection instead of Apache http client with below configuration. It took me hours to figure this out, would be helpful if we add this in the Quarkus Rest Client documentation until we find a permanent fix for Apache Http Client in native mode

quarkus.native.additional-build-args =\
    -H:EnableURLProtocols=https,\
    -J-Dorg.jboss.resteasy.microprofile.defaultToURLConnectionHttpClient=true

missourian55 on Nov 22, 2020

Thanks @geoand, added to my todos 😃

michalszynkiewicz on Nov 26, 2020

@missourian55 yes, it is safe to ignore that warning. If we provide the support on our side eventually, that warning won’t be present at all.

geoand on Nov 23, 2020

Given it’s a very common issue, if it’s a valid workaround, I would even do it in Core. But I’m not sure of all the consequences.

Let’s wait for @galderz 's opinion.

/cc @dmlloyd too

gsmet on Nov 23, 2020

@gsmet

Here is the reproducer, I used Quarkus S3 guide as the base and added other required extensions

Steps to reproduce:

Clone the repo https://github.com/missourian55/s3-demo.git
Execute this native build ./mvnw clean package -Pnative -Dnative-image.docker-build=true -Dquarkus.container-image.build=true -Dnative-image.xmx=6g
You will see below stacktrace at build time

Caused by: com.oracle.graal.pointsto.constraints.UnsupportedFeatureException: No instances of sun.security.provider.NativePRNG are allowed in the image heap as this class should be initialized at image runtime. To see how this object got instantiated use -H:+TraceClassInitialization.
Detailed message:
Trace: Object was reached by
	reading field java.security.SecureRandom.secureRandomSpi of
		constant java.security.SecureRandom@503562f4 reached by
	reading field sun.security.ssl.SSLContextImpl.secureRandom of
		constant sun.security.ssl.SSLContextImpl$TLSContext@668c6f89 reached by
	reading field sun.security.ssl.SSLSocketFactoryImpl.context of
		constant sun.security.ssl.SSLSocketFactoryImpl@33ebc721 reached by
	reading field org.apache.http.conn.ssl.SSLConnectionSocketFactory.socketfactory of
		constant org.apache.http.conn.ssl.SSLConnectionSocketFactory@4d9c51c7 reached by
	reading field java.util.concurrent.ConcurrentHashMap$Node.val of

Add below property to the application.properties and execute the build and notice build success

quarkus.native.additional-build-args =\
    -J-Dorg.jboss.resteasy.microprofile.defaultToURLConnectionHttpClient=true

Thanks in advance.

missourian55 on Nov 22, 2020

@missourian55 any chance you could share a small reproducer?

@geoand I’m surprised the Apache HTTP client doesn’t work in native? I would have thought we had fixed that for ages.

gsmet on Nov 22, 2020