Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

ranger error Keystore password was incorrect after configure ssl

avatar
Contributor

Hi I am trying enable ssl for ranger using this link

I have java keystore and truststore files, I only use this 2 files, for other services they work properly, also checked password with java keytool and it is correct, tested several passwords for keystore file from simple to hard passwords but ranger-admin gives error in /var/log/ranger/admin/catalina.out during start:

INFO: Initializing ProtocolHandler ["http-bio-6182"]
Oct 13, 2017 1:11:14 PM org.apache.coyote.AbstractProtocol init
SEVERE: Failed to initialize end point associated with ProtocolHandler ["http-bio-6182"]
java.io.IOException: Keystore was tampered with, or password was incorrect
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
        at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
        at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
        at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
        at java.security.KeyStore.load(KeyStore.java:1445)

configuration are done from ambari then I checked ranger-admin-site.xml and:

<property>
      <name>ranger.service.https.attrib.keystore.pass</name>
      <value>_</value>
    </property>

here I cant see any password there is only " _ " symbol(but from ambari I set actual password, then I tried manually edit this xml file but after restart ranger service resets it and there is "_" anyway)

this is permissions of the files(tried different permissions too):

-rw------- 1 ranger ranger 1586 Oct 11 14:29 truststore.jks

-rw-r----- 1 ranger ranger 2872 Oct 12 14:03 keystore.jks

any idea?

Thank you

1 ACCEPTED SOLUTION

avatar
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login
2 REPLIES 2

avatar
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login

avatar
Contributor

Problem solved after update HDP stack from 2.6.1 to latest 2.6.2 version

Thank you