<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Ay, so it is the cookie key I set but I see one problem with the installation. I usually just generate passwords with a program. This particular password has a ‘\’ in it and it’s missing from idp.sealer.storePassword
line in idp.properties. So please, I recommend that you restrict the characters used for passwords during installation and disallow characters that won’t propagate properly to the configuration files.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">---<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Roberto Ullfig - rullfig@uic.edu<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Systems Administrator<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Enterprise Architecture and Development | ACCC<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">University of Illinois - Chicago<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Ullfig, Roberto Alfredo <br>
<b>Sent:</b> Tuesday, February 06, 2018 11:09 AM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Initial IDP 3 Install Start Failing - key password issue<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Getting these errors when trying to start the IDP for the first time:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2018-02-06 10:41:03.095 [ERROR] : net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy: Error loading key named 'secret1'<o:p></o:p></p>
<p class="MsoNormal">java.io.IOException: Keystore was tampered with, or password was incorrect<o:p></o:p></p>
<p class="MsoNormal">…<o:p></o:p></p>
<p class="MsoNormal">Caused by: java.security.UnrecoverableKeyException: Password verification failed<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I found documentation here:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://wiki.shibboleth.net/confluence/display/IDP30/SecretKeyManagement">https://wiki.shibboleth.net/confluence/display/IDP30/SecretKeyManagement</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">but they keytool command assumes that you know a password but I never supplied a password for this while installing the IDP. The only passwords supplied were for Backchannel PKCS12 and Cookie Encryption Key. Very confused as to these error
messages. Any help would be appreciated. Thanks!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">---<o:p></o:p></p>
<p class="MsoNormal">Roberto Ullfig - <a href="mailto:rullfig@uic.edu">rullfig@uic.edu</a><o:p></o:p></p>
<p class="MsoNormal">Systems Administrator<o:p></o:p></p>
<p class="MsoNormal">Enterprise Architecture and Development | ACCC<o:p></o:p></p>
<p class="MsoNormal">University of Illinois - Chicago<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>