<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">
<div style="margin: 0px;">bash-4.1$ ./bin/seckeygen.sh --storefile credentials/sealer.jks --storepass password --versionfile credentials/sealer.kver --alias secret</div>
<div style="margin: 0px;">bash: ./bin/seckeygen.sh: /bin/bash^M: bad interpreter: No such file or directory</div>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;"><br>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">After I removed the extra ^M in the script, I got</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;"><br>
</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">./bin/seckeygen.sh --storefile credentials/sealer.jks --storepass password --versionfile credentials/sealer.kver --alias secret</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">
<div style="margin: 0px;">Exception in thread "main" java.io.IOException: Keystore was tampered with, or password was incorrect</div>
<div style="margin: 0px;"><span class="Apple-tab-span" style="white-space:pre"></span>at com.sun.crypto.provider.JceKeyStore.engineLoad(JceKeyStore.java:865)</div>
<div style="margin: 0px;"><span class="Apple-tab-span" style="white-space:pre"></span>at java.security.KeyStore.load(KeyStore.java:1433)</div>
<div style="margin: 0px;"><span class="Apple-tab-span" style="white-space:pre"></span>at net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategyTool.changeKey(BasicKeystoreKeyStrategyTool.java:150)</div>
<div style="margin: 0px;"><span class="Apple-tab-span" style="white-space:pre"></span>at net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategyTool.main(BasicKeystoreKeyStrategyTool.java:227)</div>
<div style="margin: 0px;"><br>
</div>
<div style="margin: 0px;">I don’t know if this matters, the first time when I ran install.sh, I was prompted to enter the password for sealer(don’t remember exactly what it was called, the value was set in idp.sealer.storePassword and idp.sealer.keypaasword
in idp.properites). Somehow I ran install.sh again. The second time, it didn’t prompt me to enter the password for sealer.</div>
<div style="margin: 0px;"><br>
</div>
<div style="margin: 0px;">Tomcat is running under Java 8</div>
<div style="margin: 0px;">
<div style="margin: 0px;">-bash-4.1$ ps -ef | grep java</div>
<div style="margin: 0px;">root 25992 1 1 14:37 pts/0 00:00:14 /app/shibboleth/environment/jdk/bin/java -Djava.util.logging.config.file=/app/shibboleth/environment/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
-noverify -Djava.ext.dirs=/app/shibboleth/environment/jdk/lib/ext -server -verbose:gc -Xloggc:/app/log/shibboleth/tomcat/gc.log -Xms2G -Xmx2G -XX:PermSize=1024M -XX:MaxPermSize=1024M -Djava.awt.headless=true -XX:+DisableExplicitGC -XX:+UseParallelOldGC -Didp.home=/app/shibboleth/shibboleth-idp
-Djava.endorsed.dirs=/app/shibboleth/environment/tomcat/endorsed -classpath /app/shibboleth/environment/tomcat/bin/bootstrap.jar:/app/shibboleth/environment/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/app/shibboleth/environment/tomcat -Dcatalina.home=/app/shibboleth/environment/tomcat
-Djava.io.tmpdir=/app/shibboleth/environment/tomcat/temp org.apache.catalina.startup.Bootstrap start</div>
<div style="margin: 0px;"><br>
</div>
<div style="margin: 0px;">
<div style="margin: 0px;">-bash-4.1$ /app/shibboleth/environment/jdk/bin/java -version</div>
<div style="margin: 0px;">java version "1.8.0_25"</div>
<div style="margin: 0px;">Java(TM) SE Runtime Environment (build 1.8.0_25-b17)</div>
<div style="margin: 0px;">Java HotSpot(TM) 64-Bit Server VM (build 25.25-b02, mixed mode)</div>
<div style="margin: 0px;"><br>
</div>
</div>
</div>
<div style="margin: 0px;">Hong</div>
<div style="margin: 0px;"><br>
</div>
</div>
<div>
<div>On Jan 12, 2015, at 2:07 PM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<blockquote type="cite">I had tomcat 8.0.15 downloaded from Apache.<br>
</blockquote>
<br>
That takes us back to "no idea what this box is doing" but whatever it is will turn out to be a breaking issue to document.<br>
<br>
Assuming the keystore is actually present (it really shouldn't be I guess), try running bin/seckeygen.sh as described in
<a href="https://wiki.shibboleth.net/confluence/display/IDP30/SecretKeyManagement">
https://wiki.shibboleth.net/confluence/display/IDP30/SecretKeyManagement</a><br>
<br>
That should presumably fail with a similar error. If not and it updates the key version file to boot, that says that the Java runtime from the command line (and when the installer ran) is somehow different from Tomcat's.<br>
<br>
-- Scott<br>
<br>
-- <br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a><br>
</blockquote>
</div>
<br>
</body>
</html>