[jira] [Comment Edited] (CLOUDSTACK-6378) SSL: Fail to find the generated keystore.
[ https://issues.apache.org/jira/browse/CLOUDSTACK-6378?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14108430#comment-14108430 ] Michael Phillips edited comment on CLOUDSTACK-6378 at 8/26/14 3:17 AM: --- So this seems to still be an issue despite being marked resolved. Today I installed a fresh install of cloudstack 4.4.0 on centos 6.5. Once again the logs were filled with the following error. "WARN [c.c.u.n.Link] (AgentManager-Selector:null) SSL: Fail to find the generated keystore. Loading fail-safe one to continue." What I did this time to fix the issue was to run the following command "keytool -genkey -keystore /etc/cloudstack/management/cloudmanagementserver.keystore -storepass vmops.com -keypass vmops.com -keyalg RSA -validity 3650 -dname cn="CloudstackUser",ou="yourserver FQDN",o="yourserver FQDN",c="Unknown" then restart cloudstack. Once completed I noted the following in the log which indicates to me it's fixed. INFO [c.c.s.ConfigurationServerImpl] (main:null) SSL keystore located at /etc/cloudstack/management/cloud.keystore 2014-08-24 10:18:23,162 INFO [c.c.s.ConfigurationServerImpl] (main:null) Stored SSL keystore to database. was (Author: mphilli7823): So this seems to still be an issue despite being marked resolved. Today I installed a fresh install of cloudstack 4.4.0 on centos 6.5. Once again the logs were filled with the following error. "WARN [c.c.u.n.Link] (AgentManager-Selector:null) SSL: Fail to find the generated keystore. Loading fail-safe one to continue." What I did this time to fix the issue was to copy "/usr/share/cloudstack-management/webapps/client/WEB-INF/classes/cloudmanagementserver.keystore" to "/etc/cloudstack/management/cloud.keystore" then restart cloudstack. Once completed I noted the following in the log which indicates to me it's fixed. INFO [c.c.s.ConfigurationServerImpl] (main:null) SSL keystore located at /etc/cloudstack/management/cloud.keystore 2014-08-24 10:18:23,162 INFO [c.c.s.ConfigurationServerImpl] (main:null) Stored SSL keystore to database. > SSL: Fail to find the generated keystore. > - > > Key: CLOUDSTACK-6378 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6378 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Management Server >Affects Versions: 4.2.1, 4.3.0, 4.4.0 > Environment: Confirmed this is an issue on centos 6.5 and ubuntu > 12.04 on both versions of Cloudstack 4.2.1 and 4.3.0 >Reporter: Michael Phillips >Assignee: Kishan Kavala >Priority: Minor > > The logs on versions 4.2.1 and 4.3.0 get filled with the following error: > WARN [c.c.u.n.Link] (AgentManager-Selector:null) SSL: Fail to find the > generated keystore. Loading fail-safe one to continue. > In 4.2.1, the fix was to rename cloudmanagementserver.keystore, to > cloud.keystore then restart cloudstack. > In 4.3.0, the system by default does not create the file named > cloudmanagementserver.keystore. You now have to create the keystore file by > running "sudo keytool -genkey -keystore", then name the file cloud.keystore. > This error is reproducible, and confirmed by other users. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Comment Edited] (CLOUDSTACK-6378) SSL: Fail to find the generated keystore.
[ https://issues.apache.org/jira/browse/CLOUDSTACK-6378?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14108430#comment-14108430 ] Michael Phillips edited comment on CLOUDSTACK-6378 at 8/24/14 3:47 PM: --- So this seems to still be an issue despite being marked resolved. Today I installed a fresh install of cloudstack 4.4.0 on centos 6.5. Once again the logs were filled with the following error. "WARN [c.c.u.n.Link] (AgentManager-Selector:null) SSL: Fail to find the generated keystore. Loading fail-safe one to continue." What I did this time to fix the issue was to copy "/usr/share/cloudstack-management/webapps/client/WEB-INF/classes/cloudmanagementserver.keystore" to "/etc/cloudstack/management/cloud.keystore" then restart cloudstack. Once completed I noted the following in the log which indicates to me it's fixed. INFO [c.c.s.ConfigurationServerImpl] (main:null) SSL keystore located at /etc/cloudstack/management/cloud.keystore 2014-08-24 10:18:23,162 INFO [c.c.s.ConfigurationServerImpl] (main:null) Stored SSL keystore to database. was (Author: mphilli7823): So this seems to still be an issue despite being marked resolved. Today I installed a fresh install of cloudstack 4.4.0 on centos 6.5. Once again the logs were filled with the following error. "WARN [c.c.u.n.Link] (AgentManager-Selector:null) SSL: Fail to find the generated keystore. Loading fail-safe one to continue." What I did this time to fix the issue was to move "/usr/share/cloudstack-management/webapps/client/WEB-INF/classes/cloudmanagementserver.keystore" to "/etc/cloudstack/management/cloud.keystore" then restart cloudstack. Once completed I noted the following in the log which indicates to me it's fixed. INFO [c.c.s.ConfigurationServerImpl] (main:null) SSL keystore located at /etc/cloudstack/management/cloud.keystore 2014-08-24 10:18:23,162 INFO [c.c.s.ConfigurationServerImpl] (main:null) Stored SSL keystore to database. > SSL: Fail to find the generated keystore. > - > > Key: CLOUDSTACK-6378 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6378 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Management Server >Affects Versions: 4.2.1, 4.3.0, 4.4.0 > Environment: Confirmed this is an issue on centos 6.5 and ubuntu > 12.04 on both versions of Cloudstack 4.2.1 and 4.3.0 >Reporter: Michael Phillips >Assignee: Kishan Kavala >Priority: Minor > > The logs on versions 4.2.1 and 4.3.0 get filled with the following error: > WARN [c.c.u.n.Link] (AgentManager-Selector:null) SSL: Fail to find the > generated keystore. Loading fail-safe one to continue. > In 4.2.1, the fix was to rename cloudmanagementserver.keystore, to > cloud.keystore then restart cloudstack. > In 4.3.0, the system by default does not create the file named > cloudmanagementserver.keystore. You now have to create the keystore file by > running "sudo keytool -genkey -keystore", then name the file cloud.keystore. > This error is reproducible, and confirmed by other users. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Comment Edited] (CLOUDSTACK-6378) SSL: Fail to find the generated keystore.
[ https://issues.apache.org/jira/browse/CLOUDSTACK-6378?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13965457#comment-13965457 ] Sheng Yang edited comment on CLOUDSTACK-6378 at 4/10/14 3:37 PM: - We traced back the issue to: commit de448ec4792eda5b47d79b26e9cb8ce96a2b22f4 Author: Wei Zhou Date: Thu Nov 7 11:09:06 2013 +0100 CLOUDSTACK-5042: change cloud.keystore to cloudmanagementserver.keystore and install it This commit only modify the keystore name, but remain the real place to use the keystore unchanged(Link.java). It would make cloudstack fail to found the keystore when "cloud.keystore" not existed, thus involve in fail-safe keystore kick in. We're working on fix it. was (Author: yasker): We traced back the issue to: commit de448ec4792eda5b47d79b26e9cb8ce96a2b22f4 Author: Wei Zhou Date: Thu Nov 7 11:09:06 2013 +0100 CLOUDSTACK-5042: change cloud.keystore to cloudmanagementserver.keystore and install it This commit only modify the keystore name, but remain the real place to use the keystore unchangd. It would make cloudstack fail to found the keystore when "cloud.keystore" not existed, thus involve in fail-safe keystore kick in. We're working on fix it. > SSL: Fail to find the generated keystore. > - > > Key: CLOUDSTACK-6378 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6378 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Management Server >Affects Versions: 4.2.1, 4.3.0 > Environment: Confirmed this is an issue on centos 6.5 and ubuntu > 12.04 on both versions of Cloudstack 4.2.1 and 4.3.0 >Reporter: Michael Phillips >Priority: Minor > > The logs on versions 4.2.1 and 4.3.0 get filled with the following error: > WARN [c.c.u.n.Link] (AgentManager-Selector:null) SSL: Fail to find the > generated keystore. Loading fail-safe one to continue. > In 4.2.1, the fix was to rename cloudmanagementserver.keystore, to > cloud.keystore then restart cloudstack. > In 4.3.0, the system by default does not create the file named > cloudmanagementserver.keystore. You now have to create the keystore file by > running "sudo keytool -genkey -keystore", then name the file cloud.keystore. > This error is reproducible, and confirmed by other users. -- This message was sent by Atlassian JIRA (v6.2#6252)
