Support Questions

Find answers, ask questions, and share your expertise

ranger error Keystore password was incorrect after configure ssl

avatar
Contributor

Hi I am trying enable ssl for ranger using this link

I have java keystore and truststore files, I only use this 2 files, for other services they work properly, also checked password with java keytool and it is correct, tested several passwords for keystore file from simple to hard passwords but ranger-admin gives error in /var/log/ranger/admin/catalina.out during start:

INFO: Initializing ProtocolHandler ["http-bio-6182"]
Oct 13, 2017 1:11:14 PM org.apache.coyote.AbstractProtocol init
SEVERE: Failed to initialize end point associated with ProtocolHandler ["http-bio-6182"]
java.io.IOException: Keystore was tampered with, or password was incorrect
        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780)
        at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
        at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
        at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
        at java.security.KeyStore.load(KeyStore.java:1445)

configuration are done from ambari then I checked ranger-admin-site.xml and:

<property>
      <name>ranger.service.https.attrib.keystore.pass</name>
      <value>_</value>
    </property>

here I cant see any password there is only " _ " symbol(but from ambari I set actual password, then I tried manually edit this xml file but after restart ranger service resets it and there is "_" anyway)

this is permissions of the files(tried different permissions too):

-rw------- 1 ranger ranger 1586 Oct 11 14:29 truststore.jks

-rw-r----- 1 ranger ranger 2872 Oct 12 14:03 keystore.jks

any idea?

Thank you

1 ACCEPTED SOLUTION

avatar

ranger-admin-site.xml will not have the password in plain text, so '_' you see is correct. Make sure your keystore has only one right entry and ranger SSL configs are correct.

View solution in original post

2 REPLIES 2

avatar

ranger-admin-site.xml will not have the password in plain text, so '_' you see is correct. Make sure your keystore has only one right entry and ranger SSL configs are correct.

avatar
Contributor

Problem solved after update HDP stack from 2.6.1 to latest 2.6.2 version

Thank you