users@glassfish.java.net

Re: Exceptions when changing keystore.jks password in GlassFish 3.1-b43

From: Kumar Jayanti <v.b.kumar.jayanti_at_oracle.com>
Date: Wed, 6 Jul 2011 22:19:02 +0530

It is surprising to note that it worked earlier on a 3.1-b43 and now it does not.

BTW what are you trying to do by setting keyStorePassword in JVM options. It is neither required nor is it safe.

If you need to change the keystore password you need to instead change the glassfish master password.

regards,
kumar

On 06-Jul-2011, at 7:39 PM, forums_at_java.net wrote:

> In the past I have changed the GlassFish keystore.jks password without
> issue. I'm trying to do it with a fresh GlassFish 3.1-b43 install and am
> running into exceptions.
> Below are the commands I ran. First I changed the keystore password, then I
> changed the password of both keys to be the same as the keystore password:
> keytool -storepasswd -keystore keystore.jks -storepass changeit -new ABCDEFG
> keytool -keypasswd -alias s1as -keypass changeit -new ABCDEFG -keystore
> keystore.jks -storepass ABCDEFG
> keytool -keypasswd -alias glassfish-instance -keypass changeit -new ABCDEFG
> -keystore keystore.jks -storepass ABCDEFG
> Then I modified domain.xml's JVM options (for both "default-config" and
> "server-config") to include a new JVM option:
> <jvm-options>-Djavax.net.ssl.keyStorePassword=ABCDEFG</jvm-options>
> Then I started GlassFish, tried accessing https://localhost:8181, and get the
> following exception:
> [#|2011-07-06T10:02:25.743-0400|WARNING|glassfish3.1|com.sun.grizzly.config.GrizzlyServiceListener|_ThreadID=17;_ThreadName=Thread-1;|GRIZZLY0007:
> SSL support could not be configured!
> java.io.IOException: injection failed on
> com.sun.enterprise.security.ssl.SSLUtils.secSupp with class
> com.sun.enterprise.server.pluggable.SecuritySupport
> at
> com.sun.grizzly.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:188)
> at
> com.sun.grizzly.config.SSLConfigHolder.initializeSSL(SSLConfigHolder.java:361)
> at
> com.sun.grizzly.config.SSLConfigHolder.configureSSL(SSLConfigHolder.java:237)
> at
> com.sun.grizzly.config.GrizzlyEmbeddedHttps$LazySSLInitializationFilter.execute(GrizzlyEmbeddedHttps.java:202)
> at
> com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
> at
> com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
> at
> com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
> at
> com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
> at
> com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
> at
> com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
> at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
> at
> com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
> at
> com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
> at java.lang.Thread.run(Thread.java:619)
> |#]
> [#|2011-07-06T10:02:25.751-0400|SEVERE|glassfish3.1|com.sun.grizzly.config.GrizzlyServiceListener|_ThreadID=17;_ThreadName=Thread-1;|ProtocolChain
> exception
> java.lang.NullPointerException
> at
> com.sun.grizzly.filter.SSLReadFilter.newSSLEngine(SSLReadFilter.java:352)
> at
> com.sun.grizzly.filter.SSLReadFilter.obtainSSLEngine(SSLReadFilter.java:399)
> at
> com.sun.grizzly.filter.SSLReadFilter.execute(SSLReadFilter.java:159)
> at
> com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
> at
> com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
> at
> com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
> at
> com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
> at
> com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
> at
> com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
> at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
> at
> com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
> at
> com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
> at java.lang.Thread.run(Thread.java:619)
> |#]
> What am I doing wrong? This is what I did on GlassFish V2 and it worked
> fine. It also worked fine on another GlassFish v3.1-b43 install I did a
> while back.
> Thanks,
> Ryan
>
>
> --
>
> [Message sent by forum member 'rdelaplante']
>
> View Post: http://forums.java.net/node/819052
>
>