Upgrade to 12.8.6: Keystore was tampered with, or password was incorrect

[Monica García]

Hi,

When upgrading from CCA 12.8.3 to 12.8.6 we got this error :

 In the install_debug.log:

SLENABLEDSSLEnabled="true"
CLIENTAUTHclientAuth="false"
KEYSTOREFILEkeystoreFile="C:/Program Files/CCAerver/lib/tomcat.keystore"
KEYSTOREPASSkeystorePass= *******

SCHEMEscheme="https"
SECUREsecure="true"
SSLPROTOCOLsslProtocol="TLS"
TRUSTSTOREFILE
TRUSTSTOREPASS
Execute Custom Code
    class com.ca.acm.installer.ia.actions.WebServerConfigReader.install() runtime exception:
java.lang.NullPointerException
 at com.ca.acm.installer.ia.actions.WebServerConfigReader.processConnectors(WebServerConfigReader.java:93)
 at com.ca.acm.installer.ia.actions.WebServerConfigReader.processServerXMLFile(WebServerConfigReader.java:62)
 at com.ca.acm.installer.ia.actions.WebServerConfigReader.install(WebServerConfigReader.java:43)
 at com.zerog.ia.installer.actions.CustomAction.installSelf(Unknown Source)
 at com.zerog.ia.installer.util.GenericInstallPanel$2.run(Unknown Source)

And in the tomcat.log:

020-11-17 10:52:43,914 ERROR [localhost-startStop-1] org.apache.catalina.core.ApplicationContext (ApplicationContext.java:742) - StandardWrapper.Throwable
java.lang.AssertionError: No System TLS
at okhttp3.internal.Util.assertionError(Util.java:482)
at okhttp3.OkHttpClient.systemDefaultTrustManager(OkHttpClient.java:292)
at okhttp3.OkHttpClient.<init>(OkHttpClient.java:252)
at okhttp3.OkHttpClient$Builder.build(OkHttpClient.java:919)
.....


ERROR [localhost-startStop-1] org.apache.catalina.core.StandardContext (StandardContext.java:5178) - Servlet  threw load() exceptionjava.security.KeyStoreException: problem accessing trust storejava.io.IOException: Keystore was tampered with, or password was incorrect at sun.security.ssl.TrustManagerFactoryImpl.engineInit(TrustManagerFactoryImpl.java:74) at javax.net.ssl.TrustManagerFactory.init(TrustManagerFactory.java:250) at
....

We have already validated the password againts tomcat.keystore with keytool and its Ok.

Please, could you help with that? Thanks in advance.

[Ravichand Agolla]

Hi,

Could you please create a support ticket. We will look into this.

Thanks,

Ravichand

[Monica García]

Hi Ravichand,

 

I have already created a ticket: 32379422.

 

Just one thing, trying to solve the issue, I disabled HTTPS from CCAUI and now I can not access the CCA console, neither with http and port 8080 nor https and port 8443.

 

Is there any way to restore HTTPS outside the console?

 

Thanks in advance.

 

Mónica

 

[Monica García]

I have already restored HTTPS. So I can access the CCAUI if required.

[Monica García]

Could you, please, provide any help?

I thinks it is related to telemetry services because the error is registered in the tomcat.log at 11:21 (once I access the CCAUI) :

2020-11-19 11:21:45,658 ERROR [localhost-startStop-1] org.apache.catalina.core.ApplicationContext (ApplicationContext.java:742) - StandardWrapper.Throwable
java.lang.AssertionError: No System TLS
at okhttp3.internal.Util.assertionError(Util.java:482)
at okhttp3.OkHttpClient.systemDefaultTrustManager(OkHttpClient.java:292)
at okhttp3.OkHttpClient.<init>(OkHttpClient.java:252)
at okhttp3.OkHttpClient$Builder.build(OkHttpClient.java:919)
at com.segment.analytics.Platform.defaultClient(Platform.java:31)
at com.segment.analytics.Analytics$Builder.build(Analytics.java:262)
at com.ca.casm.telemetry.TelemetryDataSender.init(TelemetryDataSender.java:67)
at com.ca.casm.telemetry.TelemetryDataSender.<init>(TelemetryDataSender.java:53)
at com.ca.casm.telemetry.TelemetryMgr.initDataSender(TelemetryMgr.java:140)
at com.ca.acm.telemetry.CCATelemetryScheduler.getTelemetryMgrObj(CCATelemetryScheduler.java:83)
at com.ca.acm.telemetry.CCATelemetryScheduler.init(CCATelemetryScheduler.java:43)
at com.ca.acm.servlets.ACMServerInitServlet.init(ACMServerInitServlet.java:357)
at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1280)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1193)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1088)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5176)
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5460)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:633)
at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1113)
at org.apache.catalina.startup.HostConfig$DeployDirectory.run(HostConfig.java:1671)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: java.security.KeyStoreException: problem accessing trust storejava.io.IOException: Keystore was tampered with, or password was incorrect
at sun.security.ssl.TrustManagerFactoryImpl.engineInit(TrustManagerFactoryImpl.java:74)
at javax.net.ssl.TrustManagerFactory.init(TrustManagerFactory.java:250)
at okhttp3.OkHttpClient.systemDefaultTrustManager(OkHttpClient.java:284)
... 26 more


At the same time, in the CCA log (logging level set to debug):
2020-11-19 11:21:45,392 INFO [localhost-startStop-1] com.ca.acm.integration.sdm.CCASDMEventsTimerThread (CCASDMEventsTimerThread.java:52) - The cca sdm events timer task has not been scheduled.
2020-11-19 11:21:45,392 INFO [localhost-startStop-1] com.ca.acm.servlets.ACMServerInitServlet (ACMServerInitServlet.java:341) - CCA SDM Events thread initialization: SUCCESS
2020-11-19 11:21:45,393 INFO [localhost-startStop-1] com.ca.acm.servlets.ACMServerInitServlet (ACMServerInitServlet.java:349) - CCA SDM Error XML Zip Cleanup thread initialization: SUCCESS
2020-11-19 11:21:45,406 DEBUG [localhost-startStop-1] com.ca.casm.telemetry.ReadWriteDBData (ReadWriteDBData.java:82) - Received database details: ****
*******
2020-11-19 11:21:45,472 INFO [localhost-startStop-1] com.ca.casm.telemetry.TelemetryMgr (TelemetryMgr.java:103) - Database connection successful.
2020-11-19 11:21:45,472 DEBUG [localhost-startStop-1] com.ca.casm.telemetry.ReadWriteDBData (ReadWriteDBData.java:201) - Fetching settings from table:acm_prop
********************
2020-11-19 11:21:45,571 DEBUG [localhost-startStop-1] com.ca.casm.telemetry.ReadWriteDBData (ReadWriteDBData.java:243) - Database query execution completed successfully.
2020-11-19 11:21:46,124 INFO [Timer-CCALogsCleanupThread] com.ca.acm.util.cleanup.CCALogsCleanupThread$1 (CCALogsCleanupThread.java:50) - The cca logs cleanup task runs successfully at 2020-11-19 11:21:46.124
2020-11-19 11:21:46,414 INFO [Timer-CCASDMErrorXMLZipCleanupThread] com.ca.acm.integration.sdm.CCASDMErrorXMLZipCleanupThread$1 (CCASDMErrorXMLZipCleanupThread.java:47) - The cca sdm error XML Zip files cleanup task runs successfully at 2020-11-19 11:21:46.413

---------

Thanks in advance