ranger error Keystore password was incorrect after configure ssl

shota — Fri, 13 Oct 2017 20:35:18 GMT

Hi I am trying enable ssl for ranger using this link

I have java keystore and truststore files, I only use this 2 files, for other services they work properly, also checked password with java keytool and it is correct, tested several passwords for keystore file from simple to hard passwords but ranger-admin gives error in /var/log/ranger/admin/catalina.out during start:

INFO: Initializing ProtocolHandler ["http-bio-6182"]
Oct 13, 2017 1:11:14 PM org.apache.coyote.AbstractProtocol init
SEVERE: Failed to initialize end point associated with ProtocolHandler ["http-bio-6182"]
java.io.IOException: Keystore was tampered with, or password was incorrect
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
        at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
        at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
        at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
        at java.security.KeyStore.load(KeyStore.java:1445)

configuration are done from ambari then I checked ranger-admin-site.xml and:

<property>
      <name>ranger.service.https.attrib.keystore.pass</name>
      <value>_</value>
    </property>

here I cant see any password there is only " _ " symbol(but from ambari I set actual password, then I tried manually edit this xml file but after restart ranger service resets it and there is "_" anyway)

this is permissions of the files(tried different permissions too):

-rw------- 1 ranger ranger 1586 Oct 11 14:29 truststore.jks

-rw-r----- 1 ranger ranger 2872 Oct 12 14:03 keystore.jks

any idea?

Thank you

Re: ranger error Keystore password was incorrect after configure ssl

vperiasamy — Fri, 13 Oct 2017 20:42:21 GMT

ranger-admin-site.xml will not have the password in plain text, so '_' you see is correct. Make sure your keystore has only one right entry and ranger SSL configs are correct.

Re: ranger error Keystore password was incorrect after configure ssl

shota — Mon, 16 Oct 2017 17:33:21 GMT

Problem solved after update HDP stack from 2.6.1 to latest 2.6.2 version

Thank you

question ranger error Keystore password was incorrect after configure ssl in Archives of Support Questions (Read Only)

ranger error Keystore password was incorrect after configure ssl

Re: ranger error Keystore password was incorrect after configure ssl

Re: ranger error Keystore password was incorrect after configure ssl