ranger error Keystore password was incorrect after configure ssl

[#1]

Hi I am trying enable ssl for ranger using this link

I have java keystore and truststore files, I only use this 2 files, for other services they work properly, also checked password with java keytool and it is correct, tested several passwords for keystore file from simple to hard passwords but ranger-admin gives error in /var/log/ranger/admin/catalina.out during start:

INFO: Initializing ProtocolHandler ["http-bio-6182"]
Oct 13, 2017 1:11:14 PM org.apache.coyote.AbstractProtocol init
SEVERE: Failed to initialize end point associated with ProtocolHandler ["http-bio-6182"]
java.io.IOException: Keystore was tampered with, or password was incorrect
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
        at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
        at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
        at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
        at java.security.KeyStore.load(KeyStore.java:1445)

configuration are done from ambari then I checked ranger-admin-site.xml and:

<property>
      <name>ranger.service.https.attrib.keystore.pass</name>
      <value>_</value>
    </property>

here I cant see any password there is only " _ " symbol(but from ambari I set actual password, then I tried manually edit this xml file but after restart ranger service resets it and there is "_" anyway)

this is permissions of the files(tried different permissions too):

-rw------- 1 ranger ranger 1586 Oct 11 14:29 truststore.jks

-rw-r----- 1 ranger ranger 2872 Oct 12 14:03 keystore.jks

any idea?

Thank you

[#2 · Accepted solution]

ranger-admin-site.xml will not have the password in plain text, so '_' you see is correct. Make sure your keystore has only one right entry and ranger SSL configs are correct.

[#3]

Problem solved after update HDP stack from 2.6.1 to latest 2.6.2 version

Thank you