Springboot -The AJP Connector is configured with secretRequired="true" but the secret attribute is either null or "" after upgrade to 2.2.5

spring-boot tomcat9 ajp
Manjunath picture Manjunath · Mar 3, 2020 · Viewed 40.5k times · Source

Caused by: java.lang.IllegalArgumentException: The AJP Connector is configured with secretRequired="true" but the secret attribute is either null or "". This combination is not valid. at org.apache.coyote.ajp.AbstractAjpProtocol.start(AbstractAjpProtocol.java:264) at org.apache.catalina.connector.Connector.startInternal(Connector.java:1035) ... 22 common frames omitted

I am seeing the above errors after upgrading the springboot from 2.1.9 to 2.2.5. The upgrade was necessary to overcome Ghostcat vulnerability by upgrading tomcat version to 9.0.31 which is being bundled with the latest springboot 2.2.5.

Answer

Jainender Chauhan picture Jainender Chauhan · Apr 7, 2020

Navigate to the server.xml in tomcat :

Replace AJP with:

<Connector protocol="AJP/1.3" address="::1" port="8009"
           redirectPort="8443" secretRequired="false" />

But make sure that you understand the security implications of that (see Krzysztof Skrzynecki's answer for that).

Related questions

Illegal reflective access when I stop SpringBoot web application with Tomcat 9 and Java10

I'm trying Java 10 development with Spring Boot 2 and I encounter some issues. The application is a simple webapp based upon Spring Boot 2. The application launch is ok but when I stop it, I get this warning: WARNING: An illegal reflective …

Read More
Spring Boot REST Controller returns 404 when deployed on external tomcat 9 server

I have a spring boot rest web application which works perfectly on the embedded server. However after following the steps mentioned in the is blog https://docs.spring.io/spring-boot/docs/current/reference/htmlsingle/#howto-create-a-deployable-war-file, I got a 404 error message …

Read More
Blocked because of a disallowed MIME type (“text/html”) : Angular 8 deployed on tomcat 9.0.30 fails to serve the assets

I have a project in which the user interface is based on angular 8 and the backend is a springboot java service. The entire project is a multi module project with the angular part being a separate module with front-end builder …

Read More