Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

ranger error Keystore password was incorrect after configure ssl

Solved Go to solution

ranger error Keystore password was incorrect after configure ssl

New Contributor

Hi I am trying enable ssl for ranger using this link

I have java keystore and truststore files, I only use this 2 files, for other services they work properly, also checked password with java keytool and it is correct, tested several passwords for keystore file from simple to hard passwords but ranger-admin gives error in /var/log/ranger/admin/catalina.out during start:

INFO: Initializing ProtocolHandler ["http-bio-6182"]
Oct 13, 2017 1:11:14 PM org.apache.coyote.AbstractProtocol init
SEVERE: Failed to initialize end point associated with ProtocolHandler ["http-bio-6182"]
java.io.IOException: Keystore was tampered with, or password was incorrect
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
        at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
        at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
        at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
        at java.security.KeyStore.load(KeyStore.java:1445)

configuration are done from ambari then I checked ranger-admin-site.xml and:

<property>
      <name>ranger.service.https.attrib.keystore.pass</name>
      <value>_</value>
    </property>

here I cant see any password there is only " _ " symbol(but from ambari I set actual password, then I tried manually edit this xml file but after restart ranger service resets it and there is "_" anyway)

this is permissions of the files(tried different permissions too):

-rw------- 1 ranger ranger 1586 Oct 11 14:29 truststore.jks

-rw-r----- 1 ranger ranger 2872 Oct 12 14:03 keystore.jks

any idea?

Thank you

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: ranger error Keystore password was incorrect after configure ssl

ranger-admin-site.xml will not have the password in plain text, so '_' you see is correct. Make sure your keystore has only one right entry and ranger SSL configs are correct.

2 REPLIES 2
Highlighted

Re: ranger error Keystore password was incorrect after configure ssl

ranger-admin-site.xml will not have the password in plain text, so '_' you see is correct. Make sure your keystore has only one right entry and ranger SSL configs are correct.

Re: ranger error Keystore password was incorrect after configure ssl

New Contributor

Problem solved after update HDP stack from 2.6.1 to latest 2.6.2 version

Thank you

Don't have an account?
Coming from Hortonworks? Activate your account here