Loading...

Details

Type: Bug
Resolution: Won't Do
Priority: Major
Fix Version/s: None
Affects Version/s: jboss-fuse-6.2.1
Component/s: S-RAMP
Labels:
None

Fuse Progress Bar:

% %
Release Note Text:
Customer has viable workaround and S-RAMP is deprecated.
Steps to Reproduce:
Hide

1. Installed JBoss EAP 6.4:
$> java -jar ~/software/jboss-eap-6.4.0-installer.jar

with the following setup:

Select the installation path: /home/USER/jboss-eap-6.4.0

Select the packs you want to install: All

Admin username: admin

Admin password: secret-123

Would you like to install quickstarts? No

Select Port Configuration: Use the default port bindings for standalone and domain modes

Enable pure IPv6 configuration: No

Choose server startup mode: Don't start the server

Configure the logging levels for Red Hat JBoss Enterprise Application Platform? No

Configure runtime environment: Perform advanced configuration

Install password vault: Yes

Enable SSL security: No

Enable LDAP authentication: No

Install Infinispan Cache: No

Add a security-domain: No

Install JDBC Driver: Yes

Install Datasource: No

Configure password vault

Vault alias: vault

Salt (8-chars): 8675309K

Iteration count: 44

Vault keystore password: secret123

New Keystore location: /home/USER/jboss-eap-6.4.0/vault.keystore

Encrypted file directory: /home/USER/jboss-eap-6.4.0/vault

2. Installed S-RAMP using installer:
$> cd jboss-eap-6.4.0
$> java -jar ~/software/sramp-installer-6.2.1.GA-redhat-1.jar

output showed no errors:
Skip already existing patch file: fuse-patch-distro-wildfly-1.6.2.zip
Copy to repository: sramp-distro-6.2.1.GA-redhat-1.zip
Run command: java -Djboss.home=. -Dlogging.configuration=file:bin/fusepatch-logging.properties -jar jboss-modules.jar -mp modules org.wildfly.extras.patch --add file:fusepatch/repository/fuse-patch-distro-wildfly-1.6.2.zip
Repository already contains fuse-patch-distro-wildfly-1.6.2
Run command: java -Djboss.home=. -Dlogging.configuration=file:bin/fusepatch-logging.properties -jar jboss-modules.jar -mp modules org.wildfly.extras.patch --add file:fusepatch/repository/sramp-distro-6.2.1.GA-redhat-1.zip
Added sramp-distro-6.2.1.GA-redhat-1
Run command: java -Djboss.home=. -Dlogging.configuration=file:bin/fusepatch-logging.properties -jar jboss-modules.jar -mp modules org.wildfly.extras.patch --update fuse-patch-distro-wildfly
Patch fuse-patch-distro-wildfly-1.6.2 has already been applied
Run command: java -Djboss.home=. -Dlogging.configuration=file:bin/fusepatch-logging.properties -jar jboss-modules.jar -mp modules org.wildfly.extras.patch --update sramp-distro
Installed sramp-distro-6.2.1.GA-redhat-1
Run command: java -Djboss.home=. -jar jboss-modules.jar -mp modules org.wildfly.extras.config --configs sramp --enable
Processing config for: sramp
Writing 'layers=artificer,soa,fuse' to: ./modules/layers.conf
Enable sramp configuration in: ./standalone/configuration/standalone.xml
Enable sramp configuration in: ./standalone/configuration/standalone-full.xml
Enable sramp configuration in: ./standalone/configuration/standalone-full-ha.xml
Enable sramp configuration in: ./standalone/configuration/standalone-ha.xml
Enable sramp configuration in: ./domain/configuration/domain.xml

3. Executed "install-artificer.sh" script to create all required keystore files:
$> cd jboss-eap-6.4.0
$> ./scripts/artificer/install-artificer.sh

output showed no errors:
Please enter a password for the Overlord 'admin' user:
Please re-enter the password:
Please enter a password for the EJB/JMS 'artificer' user:
Please re-enter the password:

BUILD SUCCESSFUL
Total time: 27 seconds

4. Started the EAP server:
#> su - USER -c "LAUNCH_JBOSS_IN_BACKGROUND=1 /home/USER/jboss-eap-6.4.0/bin/standalone.sh

but it fails with the following errors:
ERROR [org.picketlink.common] (ServerService Thread Pool – 62) Exception dealing with handler configuration:: org.picketlink.common.exceptions.TrustKeyProcessingException: java.io.IOException: Keystore was tampered with, or password was incorrect
...
ERROR [org.apache.catalina.core] (ServerService Thread Pool – 62) JBWEB001097: Error starting context /overlord-idp: LifecycleException: java.io.IOException: Keystore was tampered with, or password was incorrect
...
ERROR [org.jboss.msc.service.fail] (ServerService Thread Pool – 62) MSC000001: Failed to start service jboss.web.deployment.default-host./overlord-idp: org.jboss.msc.service.StartException in service jboss.web.deployment.default-host./overlord-idp: org.jboss.msc.service.StartException in anonymous service: JBAS018040: Failed to start context
Show
1. Installed JBoss EAP 6.4: $> java -jar ~/software/jboss-eap-6.4.0-installer.jar with the following setup: Select the installation path: /home/USER/jboss-eap-6.4.0 Select the packs you want to install: All Admin username: admin Admin password: secret-123 Would you like to install quickstarts? No Select Port Configuration: Use the default port bindings for standalone and domain modes Enable pure IPv6 configuration: No Choose server startup mode: Don't start the server Configure the logging levels for Red Hat JBoss Enterprise Application Platform? No Configure runtime environment: Perform advanced configuration Install password vault: Yes Enable SSL security: No Enable LDAP authentication: No Install Infinispan Cache: No Add a security-domain: No Install JDBC Driver: Yes Install Datasource: No Configure password vault Vault alias: vault Salt (8-chars): 8675309K Iteration count: 44 Vault keystore password: secret123 New Keystore location: /home/USER/jboss-eap-6.4.0/vault.keystore Encrypted file directory: /home/USER/jboss-eap-6.4.0/vault 2. Installed S-RAMP using installer: $> cd jboss-eap-6.4.0 $> java -jar ~/software/sramp-installer-6.2.1.GA-redhat-1.jar output showed no errors: Skip already existing patch file: fuse-patch-distro-wildfly-1.6.2.zip Copy to repository: sramp-distro-6.2.1.GA-redhat-1.zip Run command: java -Djboss.home=. -Dlogging.configuration= file:bin/fusepatch-logging.properties -jar jboss-modules.jar -mp modules org.wildfly.extras.patch --add file:fusepatch/repository/fuse-patch-distro-wildfly-1.6.2.zip Repository already contains fuse-patch-distro-wildfly-1.6.2 Run command: java -Djboss.home=. -Dlogging.configuration= file:bin/fusepatch-logging.properties -jar jboss-modules.jar -mp modules org.wildfly.extras.patch --add file:fusepatch/repository/sramp-distro-6.2.1.GA-redhat-1.zip Added sramp-distro-6.2.1.GA-redhat-1 Run command: java -Djboss.home=. -Dlogging.configuration= file:bin/fusepatch-logging.properties -jar jboss-modules.jar -mp modules org.wildfly.extras.patch --update fuse-patch-distro-wildfly Patch fuse-patch-distro-wildfly-1.6.2 has already been applied Run command: java -Djboss.home=. -Dlogging.configuration= file:bin/fusepatch-logging.properties -jar jboss-modules.jar -mp modules org.wildfly.extras.patch --update sramp-distro Installed sramp-distro-6.2.1.GA-redhat-1 Run command: java -Djboss.home=. -jar jboss-modules.jar -mp modules org.wildfly.extras.config --configs sramp --enable Processing config for: sramp Writing 'layers=artificer,soa,fuse' to: ./modules/layers.conf Enable sramp configuration in: ./standalone/configuration/standalone.xml Enable sramp configuration in: ./standalone/configuration/standalone-full.xml Enable sramp configuration in: ./standalone/configuration/standalone-full-ha.xml Enable sramp configuration in: ./standalone/configuration/standalone-ha.xml Enable sramp configuration in: ./domain/configuration/domain.xml 3. Executed "install-artificer.sh" script to create all required keystore files: $> cd jboss-eap-6.4.0 $> ./scripts/artificer/install-artificer.sh output showed no errors: Please enter a password for the Overlord 'admin' user: Please re-enter the password: Please enter a password for the EJB/JMS 'artificer' user: Please re-enter the password: BUILD SUCCESSFUL Total time: 27 seconds 4. Started the EAP server: #> su - USER -c "LAUNCH_JBOSS_IN_BACKGROUND=1 /home/USER/jboss-eap-6.4.0/bin/standalone.sh but it fails with the following errors: ERROR [org.picketlink.common] (ServerService Thread Pool – 62) Exception dealing with handler configuration:: org.picketlink.common.exceptions.TrustKeyProcessingException: java.io.IOException: Keystore was tampered with, or password was incorrect ... ERROR [org.apache.catalina.core] (ServerService Thread Pool – 62) JBWEB001097: Error starting context /overlord-idp: LifecycleException: java.io.IOException: Keystore was tampered with, or password was incorrect ... ERROR [org.jboss.msc.service.fail] (ServerService Thread Pool – 62) MSC000001: Failed to start service jboss.web.deployment.default-host./overlord-idp: org.jboss.msc.service.StartException in service jboss.web.deployment.default-host./overlord-idp: org.jboss.msc.service.StartException in anonymous service: JBAS018040: Failed to start context

SFDC Cases Counter:
SFDC Cases Links:

Description

Install EAP with the installer and option 'Install password vault: Yes', then install S-Ramp and run the artificer script.
Starting EAP then fails with the following:

16:22:12,237 ERROR [org.picketlink.common] (ServerService Thread Pool -- 61) Exception dealing with handler configuration:: org.picketlink.common.exceptions.TrustKeyProcessingException: java.io.IOException: Keystore was tampered with, or password was incorrect
	at org.picketlink.common.DefaultPicketLinkLogger.keyStoreProcessingError(DefaultPicketLinkLogger.java:304)
	at org.picketlink.identity.federation.core.impl.KeyStoreKeyManager.getSigningKeyPair(KeyStoreKeyManager.java:128) [picketlink-federation-2.5.4.SP4-redhat-1.jar:2.5.4.SP4-redhat-1]
	at org.picketlink.identity.federation.bindings.tomcat.idp.AbstractIDPValve.initHandlersChain(AbstractIDPValve.java:1271) [picketlink-jbas7-2.5.4.SP4-redhat-1.jar:2.5.4.SP4-redhat-1]
	at org.picketlink.identity.federation.bindings.tomcat.idp.AbstractIDPValve.startPicketLink(AbstractIDPValve.java:1548) [picketlink-jbas7-2.5.4.SP4-redhat-1.jar:2.5.4.SP4-redhat-1]
	at org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve.start(IDPWebBrowserSSOValve.java:93) [picketlink-jbas7-2.5.4.SP4-redhat-1.jar:2.5.4.SP4-redhat-1]
	at org.apache.catalina.core.StandardPipeline.start(StandardPipeline.java:223) [jbossweb-7.5.7.Final-redhat-1.jar:7.5.7.Final-redhat-1]
	at org.apache.catalina.core.StandardContext.start(StandardContext.java:3716) [jbossweb-7.5.7.Final-redhat-1.jar:7.5.7.Final-redhat-1]
	at org.jboss.as.web.deployment.WebDeploymentService.doStart(WebDeploymentService.java:163) [jboss-as-web-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]
	at org.jboss.as.web.deployment.WebDeploymentService.access$000(WebDeploymentService.java:61) [jboss-as-web-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]
	at org.jboss.as.web.deployment.WebDeploymentService$1.run(WebDeploymentService.java:96) [jboss-as-web-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [rt.jar:1.8.0_60]
	at java.util.concurrent.FutureTask.run(FutureTask.java:266) [rt.jar:1.8.0_60]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [rt.jar:1.8.0_60]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [rt.jar:1.8.0_60]
	at java.lang.Thread.run(Thread.java:745) [rt.jar:1.8.0_60]
	at org.jboss.threads.JBossThread.run(JBossThread.java:122)
Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect

Installing S-Ramp on EAP with installed vault breaks the EAP installation

Details

Description

Attachments

Activity

People

Dates