nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

WEM 8.1 CA non-communicative

Shanti_Suresh

All,

Thought I'd brainstorm in case anyone has an "AHA!" moment and can help.

The CA is non-communicative seemingly on account of a keystore password and I'm trying to figure out why the CA is complaining on startup. The Keystore and Truststore that I had set for SSL within the CA can be viewed using keytool. If I might have made an error when I keyed in the passwords in the Config Console, is there a way to manually change these outside of the Configuration Console? And if cfgedit is the way to go, then do I use the SHA digest of the passwords or the plaintext? I am a bit baffled and would appreciate your take. Also, the VCM loads the identity and trust stores fine but before that happens, I get the JSSE component not initialized because of incorrect password and that the Keystore has been tampered with. I am a bit baffled and would appreciate your take.

------------------CA log:-----

2013-01-31 10:14:20,795 | ERROR | e.config.agent.AgentHttpServer | | 000-000-0001: Error [vgnlauncher] [com.vignette.config.agent.AgentHttpServer]
java.security.UnrecoverableKeyException: Cannot recover key
at sun.security.provider.KeyProtector.recover(KeyProtector.java:311)

...

at com.vignette.http.JSSESocketFactory.getSSLContext(JSSESocketFactory.java:106)...

---------------

--------VgnVCMServer.out:-----

java.io.IOException: Keystore was tampered with, or password was incorrect
   at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771)
   at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38)
   at java.security.KeyStore.load(KeyStore.java:1185)
   at com.vignette.http.JSSESocketFactory.getSSLContext(JSSESocketFactory.java:88)
   at com.vignette.http.JSSESocketFactory.getSSLSocketFactory(JSSESocketFactory.java:33)
   at com.vignette.http.server.action.builtin.axis.CommonsSocketFactory.<init>(CommonsSocketFactory.java:66)

...

Since the keystore passwords have to be entered in different components, I suspect I might have made an error while entering the one for the CA.

Thanks.

-Shanti

Find more posts tagged with

Comments

Uday Bhasker Jorigala

You enter the plain text as password, cfgeditwill encrypt it automatically. You need to edit cfg file directly usingcfgedit, instead of connecting to server.

Thanks,
Uday Bhasker J.

From:   "eLink Entry:Discussion Group - Web Experience Management" <v7webcontentmanagement@elinkkc.opentext.com>
To:   "eLink Recipient"<devnull@elinkkc.opentext.com>
Date:   01/31/2013 01:10 PM
Subject:    WEM 8.1 CA non-communicative

WEM8.1 CA non-communicative

Posted by shanti@umich.edu(Suresh, Shanti) On 01-31-2013 13:06

All,

Thought I'd brainstorm in case anyone has an "AHA!"moment and can help.

The CA is non-communicative seemingly on account of a keystorepassword and I'm trying to figure out why the CA is complaining on startup. The Keystore and Truststore that I had set for SSL within the CAcan be viewed using keytool. If I might have made an error when Ikeyed in the passwords in the Config Console, is there a way to manuallychange these outside of the Configuration Console? And if cfgeditis the way to go, then do I use the SHA digest of the passwords or theplaintext? I am a bit baffled and would appreciate your take. Also,the VCM loads the identity and trust stores fine but before that happens,I get the JSSE component not initialized because of incorrect passwordand that the Keystore has been tampered with. I am a bit baffledand would appreciate your take.

------------------CA ! log:---- -

2013-01-31 10:14:20,795 | ERROR | e.config.agent.AgentHttpServer| | 000-000-0001: Error [vgnlauncher] [com.vignette.config.agent.AgentHttpServer]
java.security.UnrecoverableKeyException: Cannot recover key
at sun.security.provider.KeyProtector.recover(KeyProtector.java:311)

...

at com.vignette.http.JSSESocketFactory.getSSLContext(JSSESocketFactory.java:106)...

---------------

--------VgnVCMServer.out:-----

java.io.IOException: Keystore was tampered with, or passwordwas incorrect
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771)
at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38)
at java.security.KeyStore.load(KeyStore.j! ava:1185)
&n bsp; at com.vignette.http.JS! SESocketFactory.getSSLContext(JSSESocketFactory.java:88)
at com.vignette.http.JSSESocketFactory.getSSLSocketFactory(JSSESocketFactory.java:33)
at com.vignette.http.server.action.builtin.axis.CommonsSocketFactory.<init>(CommonsSocketFactory.java:66)

...

Since the keystore passwords have to be entered in differentcomponents, I suspect I might have made an error while entering the onefor the CA.

Thanks.

-Shanti

[To post a comment, use the normal replyfunction]
Forum:	DiscussionGroup - Web Experience Management
Content Server:	KnowledgeCenter