users@glassfish.java.net

certutil crashes DAS

From: <forums_at_java.net>
Date: Thu, 14 Apr 2011 02:19:31 -0500 (CDT)

 Hello everybody.

 

I'd like to share with you a weird problem I ran into when using *certutil*
tool shipped with GlassFish. Scenario is: fresh appserver installation (v
2.1.1) with default domain1 domain. Starting & stopping DAS works
faultlessly. Then I try to manually export the default DAS certificate using
the command below:

 

appserver-install-dir/lib/upgrade/certutil -L -d
appserver-instance-dir/config -n s1as -a -o sjsas.crt
 

When I execute this command I always get the following error: "certutil:
could not find certificate named "s1as": security library: bad database." and
an empty sjsas.crt file is created. What is even more surprising is the fact
that after executing this command I cannot start my domain because of:

 

[#|2011-04-14T09:03:10.461+0200|WARNING|sun-appserver2.1|javax.enterprise.system.stream.err|_ThreadID=10;_ThreadName=main;_RequestID=547c2689-3102-4944-87f3-4ebb23ea482a;|java.lang.reflect.InvocationTargetException 
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)   
    at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
      at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
      at java.lang.reflect.Method.invoke(Method.java:597)        at
com.sun.enterprise.server.PELaunch.main(PELaunch.java:415)Caused by:
java.lang.UnsatisfiedLinkError: no nspr4 in java.library.path        at
java.lang.ClassLoader.loadLibrary(ClassLoader.java:1734)        at
java.lang.Runtime.loadLibrary0(Runtime.java:823)        at
java.lang.System.loadLibrary(System.java:1028)        at
com.sun.enterprise.ee.security.EESecuritySupportImpl.loadNSSNativeLibrary(EESecuritySupportImpl.java:176) 
      at
com.sun.enterprise.ee.security.EESecuritySupportImpl.initNSS(EESecuritySupportImpl.java:133) 
      at
com.sun.enterprise.ee.security.EESecuritySupportImpl.<init>(EESecuritySupportImpl.java:95) 
      at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method)        at
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39) 
      at
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27) 
      at java.lang.reflect.Constructor.newInstance(Constructor.java:513) 
      at java.lang.Class.newInstance0(Class.java:355)        at
java.lang.Class.newInstance(Class.java:308)        at
com.sun.enterprise.pluggable.PluggableFeatureFactoryBaseImpl.invoke(PluggableFeatureFactoryBaseImpl.java:84) 
      at $Proxy0.getSecuritySupport(Unknown Source)        at
com.sun.enterprise.security.SecurityUtil.getSecuritySupport(SecurityUtil.java:364) 
      at
com.sun.enterprise.security.SSLUtils.<clinit>(SSLUtils.java:102)       
at
com.sun.enterprise.security.SecurityLifecycle.onInitialization(SecurityLifecycle.java:101) 
      at
com.sun.enterprise.server.ApplicationServer.onInitialization(ApplicationServer.java:265) 
      at
com.sun.enterprise.server.ondemand.OnDemandServer.onInitialization(OnDemandServer.java:103) 
      at com.sun.enterprise.server.PEMain.run(PEMain.java:399)       
at com.sun.enterprise.server.PEMain.main(PEMain.java:336)        ... 5
more|#]
 


Recreating (deleting & creating again) domain resolves the problem until the
certutil is used again. Your suggestions are greatly appreciated!

Regards,

AG



 


--
[Message sent by forum member 'jiggster']
View Post: http://forums.java.net/node/791667