vidlb
commented
4 months ago I also tried without https but I got the same errors.
Now I tried 2.25 and adding ENTITY_RESOLUTION_ALLOWLIST="*" : this seems to fix WMS !
But GWC still doesn't work.
Closed vidlb closed 4 months ago
vidlb
commented
4 months ago I also tried without https but I got the same errors.
Now I tried 2.25 and adding ENTITY_RESOLUTION_ALLOWLIST="*" : this seems to fix WMS !
But GWC still doesn't work.
fro-gradient
commented
4 months ago I'm seeing the same bug, also using 2.25.0.
Note that allowing everything in entity resolution is a security risk, as described in the corresponding Web UI setting (see bottom-most setting in the screenshot).
vidlb
commented
4 months ago Seeding is also impacted, same kind of errors than for the "demo" tool
vidlb
commented
4 months ago I'm seeing the same bug, also using 2.25.0.
Note that allowing everything in entity resolution is a security risk, as described in the corresponding Web UI setting (see bottom-most setting in the screenshot).
Yes I saw that, in the GS docs it is stated that some URLs are allowed by default - the one found in SLD files, yet it seems SLD files are the reason for org.xml.sax.SAXException:
vidlb
commented
4 months ago 5 minutes later, WMS png preview is failing again with the following :
java.lang.IllegalArgumentException: Could not find a security wrapper for class class org.geoserver.security.decorators.SecuredGridFormat, cannot secure the objectI'm now trying without geofence enabled. Edit : same errors still
vidlb
commented
4 months ago So WMS png demo is kind of random, even after I re-disabled the unrestricted xml entities opt it seems to work, but I guess it will fail after I reboot the container.
I also tried wms jpeg and it's complaining about libjpepturbo
NyakudyaA
commented
4 months ago The default entity list that is recommended is https://docs.geoserver.org/main/en/user/installation/upgrade.html#external-entity-allow-list-default-geoserver-2-25-and-newer and we have set this in https://github.com/kartoza/docker-geoserver/blob/develop/scripts/env-data.sh#L453, so if the default SLD are causing issues we need to report this upstream.
The default SLD has the following header
<StyledLayerDescriptor version="1.0.0"
xsi:schemaLocation="http://www.opengis.net/sld StyledLayerDescriptor.xsd"
xmlns="http://www.opengis.net/sld"
xmlns:ogc="http://www.opengis.net/ogc"
xmlns:xlink="http://www.w3.org/1999/xlink"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<!-- a named layer is the basic building block of an sld document -->which should be covered by "www.w3.org|schemas.opengis.net|www.opengis.net|inspire.ec.europa.eu/schemas"
In summary the issues that are reported here is that
vidlb
commented
4 months ago I'm not using the sample data so I guess this is probably due to my geotiff (it is huge indeed).
I'll give it a try with sample data tomorrow.
Sorry for this chaotic issue - I was finding more problems on the fly.
It may be a mixture of upstream bugs in this fresh release and other due to my trash dataset :sweat_smile:
vidlb
commented
4 months ago I needed to know so I tested sample data and I got the same error for a simple WMS preview - PNG or JPEG :
java.lang.reflect.UndeclaredThrowableExceptionorg.xml.sax.SAXException: Entity resolution disallowed for null
II thought the null could be due to my empty ENTITY_RESOLUTION_ALLOWLIST= in .env but since you're testing [ -z ] in env-data.sh, this is something else.
After allowing "*" entities via checkbox in GUI, png or jpeg WMS query on raster data returns :
<?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE ServiceExceptionReport SYSTEM "https://vps-b2de2f77.vps.ovh.net/geoserver/schemas/wms/1.1.1/WMS_exception_1_1_1.dtd"> <ServiceExceptionReport version="1.1.1" > <ServiceException>
java.lang.RuntimeException: Error creating jpegturbo decompressor: No JPEG image is associated with this instance
Error creating jpegturbo decompressor: No JPEG image is associated with this instance
No JPEG image is associated with this instance
</ServiceException></ServiceExceptionReport>WMS for vector data is OK
vidlb
commented
4 months ago Same story for if I activate GWC for the sample raster data "Img_Sample". WMTS query yields org.geowebcache.GeoWebCacheException: Problem communicating with GeoServer
For the matter of 2.25 this is most likely due to the SAXException since GWC cannot cache / seed the layer via WMS.
I'll need not retry 2.24 with sample data and / or fix my bounds issue in this geotiff
miceg
commented
4 months ago The same issue affects other GeoServer containers.
I've got a fix for this in #651 which does not require allowing unrestricted entity resolution (which is a security risk) – it just removes the printing plugin, which is what pulls in xercesImpl and triggers this issue.
Unfortunately, this Docker image always enables the printing plugin and there is no way to disable it without updating the Dockerfile and rebuilding the image.
vidlb
commented
4 months ago @NyakudyaA there is still a jpeg turbo error in 2.25, should I open another issue or is this more of an upstream problem ?
As suggested in the latest docs I tried to add ADDITIONAL_JAVA_STARTUP_OPTIONS="-Ddisable.turbojpeg=true" but it doesn't fix it, even on fresh install
NyakudyaA
commented
4 months ago @vidlb Can you open another one and we can track it?
What is the bug or the crash?
I can't get GWC or WMS to work, I got the following error when trying layer preview :
And for gwc demo :
I'm struggling to understand how should I set the env variables regarding reverse proxy / https : the README is kind on confusing in that section. Is there an env variable I could miss that may explain this error ?
I tried several ways of installing geoserver, and this dockerfile seems a good compromise but I can't get it to work with my env. I'm desperate, every time I try to install geoserver (except via geonode) I ran into this kind of problems (everything seems to work until I try to query GWC / WMTS)
Steps to reproduce the issue
Fresh install behind https reverse proxy. Create a geotiff datastore and enable caching. Try to query wms or gwc.
Versions
2.23.2, 2.24.2, 2.25.0
Additional context
I'm trying to configure this with geofence plugin enabled. GEOSERVER_CSRF_WHITELIST is set to my hostname