Upgrade from 8.9.3 to 8.9.8 container version of SonarQube failing elasticsearch startup

upgrade from SonarQube Enterprise 8.9.3 to 8.9.8 podman container version of sonarqube failing elastic search startup on RHEL7 server with OpenJDK 11 base container. Fails with this error:

Waiting for Elasticsearch to be up and running
warning: no-jdk distributions that do not bundle a JDK are deprecated and will be removed in a future release
Exception in thread "main" org.elasticsearch.bootstrap.BootstrapException: java.security.NoSuchAlgorithmException: PBKDF2WithHmacSHA512 SecretKeyFactory not available
Likely root cause: java.security.NoSuchAlgorithmException: PBKDF2WithHmacSHA512 SecretKeyFactory not available
        at java.base/javax.crypto.SecretKeyFactory.<init>(SecretKeyFactory.java:122)
        at java.base/javax.crypto.SecretKeyFactory.getInstance(SecretKeyFactory.java:168)
        at org.elasticsearch.common.settings.KeyStoreWrapper.createCipher(KeyStoreWrapper.java:312)
        at org.elasticsearch.common.settings.KeyStoreWrapper.encrypt(KeyStoreWrapper.java:405)
        at org.elasticsearch.common.settings.KeyStoreWrapper.save(KeyStoreWrapper.java:516)
        at org.elasticsearch.bootstrap.Bootstrap.loadSecureSettings(Bootstrap.java:272)
        at org.elasticsearch.bootstrap.Bootstrap.loadSecureSettings(Bootstrap.java:247)
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:364)
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:166)
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:157)
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:77)
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:112)
        at org.elasticsearch.cli.Command.main(Command.java:77)
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:122)
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:80)

Server is FIPS compliant, but not finding any option for this setting in sonar.properties and container will not run to allow me to investigate further.

Tried clearing the es7 directory, but no help.

Hi,

Welcome to the community!

Thanks for mentioning FIPS initially. We just don’t support it, & it’s probably the root of your problem.

 
HTH,
Ann