Sonarqube Upgrade from 8.5.1 to Higher Version Failed

Hi,

We are using Sonarqube 8.5.1 Developer Edition. While, technical upgrade to higher version is successful, but while accessing Sonarqube application its stops with following error:

Please advice, what is causing an issue?

2021.03.17 11:19:51 INFO web[o.s.s.p.Platform] WebServer is operational,
2021.03.17 11:19:52 INFO app[o.s.a.SchedulerImpl] Process[web] is up,
2021.03.17 11:19:52 INFO app[o.s.a.ProcessLauncherImpl] Launch process[[key=‘ce’, ipcIndex=3, logFilenamePrefix=ce]] from [/opt/sonarqube]: /opt/java/openjdk/bin/java -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djava.io.tmpdir=/opt/sonarqube/temp -XX:-OmitStackTraceInFastThrow --add-opens=java.base/java.util=ALL-UNNAMED -Xmx512m -Xms128m -XX:+HeapDumpOnOutOfMemoryError -Djavax.net.ssl.trustStore=/opt/sonarqube/conf/sonarqube.jks -Djavax.net.ssl.trustStorePassword=ci_at_canon -Dhttp.nonProxyHosts=localhost|127.|[::1] -cp ./lib/common/:/opt/sonarqube/lib/jdbc/postgresql/postgresql-42.2.17.jar org.sonar.ce.app.CeServer /opt/sonarqube/temp/sq-process2221741860123167809properties,
2021.03.17 11:19:53 INFO ce[o.s.p.ProcessEntryPoint] Starting ce,
2021.03.17 11:19:53 INFO ce[o.s.ce.app.CeServer] Compute Engine starting up…,
2021.03.17 11:19:53 INFO ce[o.s.c.e.CoreExtensionsLoader] Loaded core extensions: developer-edition, developer-scanner, developer-server, license,
2021.03.17 11:19:53 INFO ce[o.s.s.e.EsClientProvider] Connected to local Elasticsearch: [http://localhost:9001],
2021.03.17 11:19:53 ERROR ce[o.s.ce.app.CeServer] Compute Engine startup failed,
java.lang.IllegalStateException: Unable to load component class org.sonar.server.es.EsClient,
at org.sonar.core.platform.ComponentContainer$ExtendedDefaultPicoContainer.getComponent(ComponentContainer.java:66),
at org.picocontainer.DefaultPicoContainer.getComponent(DefaultPicoContainer.java:632),
at org.picocontainer.parameters.BasicComponentParameter$1.resolveInstance(BasicComponentParameter.java:118),
at org.picocontainer.parameters.ComponentParameter$1.resolveInstance(ComponentParameter.java:136),
at org.picocontainer.injectors.SingleMemberInjector.getParameter(SingleMemberInjector.java:78),
at org.picocontainer.injectors.ConstructorInjector$CtorAndAdapters.getParameterArguments(ConstructorInjector.java:309),
at org.picocontainer.injectors.ConstructorInjector$1.run(ConstructorInjector.java:335),
at org.picocontainer.injectors.AbstractInjector$ThreadLocalCyclicDependencyGuard.observe(AbstractInjector.java:270),
at org.picocontainer.injectors.ConstructorInjector.getComponentInstance(ConstructorInjector.java:364),
at org.picocontainer.injectors.AbstractInjectionFactory$LifecycleAdapter.getComponentInstance(AbstractInjectionFactory.java:56),
at org.picocontainer.behaviors.AbstractBehavior.getComponentInstance(AbstractBehavior.java:64),
at org.picocontainer.behaviors.Stored.getComponentInstance(Stored.java:91),
at org.picocontainer.DefaultPicoContainer.instantiateComponentAsIsStartable(DefaultPicoContainer.java:1034),
at org.picocontainer.DefaultPicoContainer.addAdapterIfStartable(DefaultPicoContainer.java:1026),
at org.picocontainer.DefaultPicoContainer.startAdapters(DefaultPicoContainer.java:1003),
at org.picocontainer.DefaultPicoContainer.start(DefaultPicoContainer.java:767),
at org.sonar.core.platform.ComponentContainer.startComponents(ComponentContainer.java:136),
at org.sonar.ce.container.ComputeEngineContainerImpl.startLevel1(ComputeEngineContainerImpl.java:208),
at org.sonar.ce.container.ComputeEngineContainerImpl.start(ComputeEngineContainerImpl.java:180),
at org.sonar.ce.ComputeEngineImpl.startup(ComputeEngineImpl.java:45),
at org.sonar.ce.app.CeServer$CeMainThread.attemptStartup(CeServer.java:163),
at org.sonar.ce.app.CeServer$CeMainThread.run(CeServer.java:141),
Caused by: java.lang.IllegalStateException: could not create the default ssl context,
at org.elasticsearch.client.RestClientBuilder.createHttpClient(RestClientBuilder.java:231),
at java.base/java.security.AccessController.doPrivileged(Native Method),
at org.elasticsearch.client.RestClientBuilder.build(RestClientBuilder.java:201),
at org.elasticsearch.client.RestHighLevelClient.(RestHighLevelClient.java:291),
at org.elasticsearch.client.RestHighLevelClient.(RestHighLevelClient.java:283),
at org.sonar.server.es.EsClient$MinimalRestHighLevelClient.(EsClient.java:261),
at org.sonar.server.es.EsClient.(EsClient.java:95),
at org.sonar.server.es.EsClientProvider.provide(EsClientProvider.java:78),
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method),
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source),
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source),
at java.base/java.lang.reflect.Method.invoke(Unknown Source),
at org.picocontainer.injectors.MethodInjector.invokeMethod(MethodInjector.java:129),
at org.picocontainer.injectors.MethodInjector.access$000(MethodInjector.java:39),
at org.picocontainer.injectors.MethodInjector$2.run(MethodInjector.java:113),
at org.picocontainer.injectors.AbstractInjector$ThreadLocalCyclicDependencyGuard.observe(AbstractInjector.java:270),
at org.picocontainer.injectors.MethodInjector.decorateComponentInstance(MethodInjector.java:120),
at org.picocontainer.injectors.CompositeInjector.decorateComponentInstance(CompositeInjector.java:58),
at org.picocontainer.injectors.Reinjector.reinject(Reinjector.java:142),
at org.picocontainer.injectors.ProviderAdapter.getComponentInstance(ProviderAdapter.java:96),
at org.picocontainer.DefaultPicoContainer.getInstance(DefaultPicoContainer.java:699),
at org.picocontainer.DefaultPicoContainer.getComponent(DefaultPicoContainer.java:647),
at org.sonar.core.platform.ComponentContainer$ExtendedDefaultPicoContainer.getComponent(ComponentContainer.java:64),
… 21 common frames omitted,
Caused by: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext),
at java.base/java.security.Provider$Service.newInstance(Unknown Source),
at java.base/sun.security.jca.GetInstance.getInstance(Unknown Source),
at java.base/sun.security.jca.GetInstance.getInstance(Unknown Source),
at java.base/javax.net.ssl.SSLContext.getInstance(Unknown Source),
at java.base/javax.net.ssl.SSLContext.getDefault(Unknown Source),
at org.elasticsearch.client.RestClientBuilder.createHttpClient(RestClientBuilder.java:222),
… 43 common frames omitted,
Caused by: java.security.KeyStoreException: problem accessing trust store,
at java.base/sun.security.ssl.TrustManagerFactoryImpl.engineInit(Unknown Source),
at java.base/javax.net.ssl.TrustManagerFactory.init(Unknown Source),
at java.base/sun.security.ssl.SSLContextImpl$DefaultManagersHolder.getTrustManagers(Unknown Source),
at java.base/sun.security.ssl.SSLContextImpl$DefaultManagersHolder.(Unknown Source),
at java.base/sun.security.ssl.SSLContextImpl$DefaultSSLContext.(Unknown Source),
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method),
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source),
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source),
at java.base/java.lang.reflect.Constructor.newInstance(Unknown Source),
at java.base/java.security.Provider.newInstanceUtil(Unknown Source),
… 49 common frames omitted,
Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect,
at java.base/sun.security.provider.JavaKeyStore.engineLoad(Unknown Source),
at java.base/sun.security.util.KeyStoreDelegator.engineLoad(Unknown Source),
at java.base/java.security.KeyStore.load(Unknown Source),
at java.base/sun.security.ssl.TrustStoreManager$TrustAnchorManager.loadKeyStore(Unknown Source),
at java.base/sun.security.ssl.TrustStoreManager$TrustAnchorManager.getTrustedCerts(Unknown Source),
at java.base/sun.security.ssl.TrustStoreManager.getTrustedCerts(Unknown Source),
… 59 common frames omitted,
Caused by: java.security.UnrecoverableKeyException: Password verification failed,
… 65 common frames omitted,
2021.03.17 11:19:53 INFO ce[o.s.p.ProcessEntryPoint] Hard stopping process,
2021.03.17 11:19:53 INFO app[o.s.a.SchedulerImpl] Process[ce] is stopped,
2021.03.17 11:19:53 INFO web[o.s.p.ProcessEntryPoint] Hard stopping process,
2021.03.17 11:19:54 INFO web[o.s.s.n.NotificationDaemon] Notification service stopped,
2021.03.17 11:19:54 WARN web[o.a.c.l.WebappClassLoaderBase] The web application [ROOT] appears to have started a thread named [Thread-2] but has failed to stop it. This is very likely to create a memory leak. Stack trace of thread:\n java.base@11.0.10/java.net.SocketInputStream.socketRead0(Native Method)\n java.base@11.0.10/java.net.SocketInputStream.socketRead(Unknown Source)\n java.base@11.0.10/java.net.SocketInputStream.read(Unknown Source)\n java.base@11.0.10/java.net.SocketInputStream.read(Unknown Source)\n java.base@11.0.10/java.io.BufferedInputStream.fill(Unknown Source)\n java.base@11.0.10/java.io.BufferedInputStream.read1(Unknown Source)\n java.base@11.0.10/java.io.BufferedInputStream.read(Unknown Source)\n java.naming@11.0.10/com.sun.jndi.ldap.Connection.run(Unknown Source)\n java.base@11.0.10/java.lang.Thread.run(Unknown Source),
2021.03.17 11:19:54 INFO app[o.s.a.SchedulerImpl] Process[web] is stopped,
2021.03.17 11:19:54 INFO app[o.s.a.SchedulerImpl] Process[es] is stopped,
2021.03.17 11:19:54 INFO app[o.s.a.SchedulerImpl] SonarQube is stopped,
2021.03.17 11:19:54 WARN app[o.s.a.p.AbstractManagedProcess] Process exited with exit value [es]: 143,

Hi @VivekMistry ,

looks like you have changed the password on your keystore and did not pass it to sonarqube. try setting

sonar.web.javaAdditionalOpts=-Djavax.net.ssl.trustStore=<path to keystore> -Djavax.net.ssl.trustStorePassword=<your password> 
sonar.ce.javaAdditionalOpts=-Djavax.net.ssl.trustStore=<path to keystore> -Djavax.net.ssl.trustStorePassword=<your password> 
sonar.search.javaAdditionalOpts=-Djavax.net.ssl.trustStore=<path to keystore> -Djavax.net.ssl.trustStorePassword=<your password> 

in <SONARQUBE_HOME>/conf/sonar.properties and start again. also as you have leaked your truststore password in this forum you should probably change it :wink: