Re: 1.1 keystore portlet bugs & patches

[Joe Bohn]

Thanks for the response Aaron.  Just to clarify ... should I go ahead 
and look into the patch from Vamsi or are you already looking at this?

Some more info (and strange results) on the failure when the 
default-geronimo keystore is locked:

jetty:
 -  It really only takes one mouse click to hose the server.  After I 
click on the "unlocked" icon under Available it changes to "locked" with 
no error or warning.  This is enough to hose the server on a subsequent 
restart.  More-over, it isn't obvious how to unlock this once I lock it 
(if I want to correct things before I terminate the server).  It didn't 
require a password or anything other than the mouse click to lock it. 
However, to unlock it requires a password.  How can one learn the 
password for the default keystore?  Perhaps if we required the password 
on the lock operation (along with a warning message) it would prevent a 
casual click  from having such destructive results.  thoughts?

tomcat:
 - The same operation on tomcat doesn't result in same failure to start 
the server ... but I suspect this is because we fail to persist the 
knowledge that the keystore is locked to begin with.  Below is the 
serialization failure I get on shutdown.  The funny thing is that after 
I restart the server the portlet continues to show the geronimo-default 
keystore as locked ... and yet this doesn't prevent the server from 
starting (as with jetty).  I thought the error on shutdown was because 
we couldn't persist that locked attribute and hence that was why tomcat 
could still start.  Any clues what's really going on here?

Here's the serialization error on shutdown.  There are no errors on 
restart but subsequent shutdowns continue to produce the same error if I 
navigate to the portlet at all:
Server shutdown begun
11:05:39,515 WARN  [[/console-standard]] Cannot serialize session 
attribute 
javax.portlet.p.Security_keystores_row1_col1_p1?org.apache.geronimo.keystore.geronim
o-default for session C547C812F95DC4D3E60D02CEB57D0110
java.io.NotSerializableException: 
org.apache.geronimo.management.geronimo.KeystoreInstance$$EnhancerByCGLIB$$1211917
        at 
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1054)
        at 
java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1332)
        at 
java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1304)
        at 
java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1247)
        at 
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1052)
        at 
java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:278)
        at 
org.apache.catalina.session.StandardSession.writeObject(StandardSession.java:1460)
        at 
org.apache.catalina.session.StandardSession.writeObjectData(StandardSession.java:936)
        at 
org.apache.catalina.session.StandardManager.doUnload(StandardManager.java:516)
        at 
org.apache.catalina.session.StandardManager.unload(StandardManager.java:462)
        at 
org.apache.catalina.session.StandardManager.stop(StandardManager.java:666)
        at 
org.apache.catalina.core.StandardContext.stop(StandardContext.java:4316)
        at 
org.apache.geronimo.tomcat.GeronimoStandardContext.stop(GeronimoStandardContext.java:216)
        at 
org.apache.geronimo.tomcat.TomcatContainer.removeContext(TomcatContainer.java:324)
        at 
org.apache.geronimo.tomcat.TomcatContainer$$FastClassByCGLIB$$9370b073.invoke(<generated>)
        at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
        at 
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38)
        at 
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817)
        at 
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
        at 
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35)
        at 
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96)
        at 
org.apache.geronimo.tomcat.TomcatContainer$$EnhancerByCGLIB$$350b65fa.removeContext(<generated>)
        at 
org.apache.geronimo.tomcat.TomcatWebAppContext.doStop(TomcatWebAppContext.java:459)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstance.destroyInstance(GBeanInstance.java:1143)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStop(GBeanInstanceState.java:337)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstanceState.stop(GBeanInstanceState.java:188)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstance.stop(GBeanInstance.java:548)
        at 
org.apache.geronimo.kernel.basic.BasicKernel.stopGBean(BasicKernel.java:423)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstanceState.stop(GBeanInstanceState.java:180)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstance.stop(GBeanInstance.java:548)
        at 
org.apache.geronimo.kernel.basic.BasicKernel.stopGBean(BasicKernel.java:423)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstanceState.stop(GBeanInstanceState.java:180)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstance.stop(GBeanInstance.java:548)
        at 
org.apache.geronimo.kernel.basic.BasicKernel.stopGBean(BasicKernel.java:423)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstanceState.stop(GBeanInstanceState.java:180)
        at 
org.apache.geronimo.gbean.runtime.GBeanInstance.stop(GBeanInstance.java:548)
        at 
org.apache.geronimo.kernel.basic.BasicKernel.stopGBean(BasicKernel.java:423)
        at 
org.apache.geronimo.kernel.config.KernelConfigurationManager$ShutdownHook.run(KernelConfigurationManager.java:310)
        at 
org.apache.geronimo.kernel.basic.BasicKernel.notifyShutdownHooks(BasicKernel.java:668)
        at 
org.apache.geronimo.kernel.basic.BasicKernel.shutdown(BasicKernel.java:645)
        at org.apache.geronimo.system.main.Daemon$1.run(Daemon.java:245)
Server shutdown completed


Aaron Mulder wrote:
On 7/26/06, Joe Bohn <[EMAIL PROTECTED]> wrote:

I was looking to see what else we need to get fixed in 1.1.1 and noticed
that there are several issues (in both 1.1 and 1.1.1) around the
keystore portlet.   I know nothing about the keystore portlet and
thought I'd check here (esp. with Aaron) before I started looking into
the patches that Vamsi has provided.   It appears that this is a real
problem spot (esp. given my initial experiment ... see below), so I'm
hoping that the patch from Vamsi works wonders :-) .

It seems like there are a number of issues (1196, 1531, 1984, and 2218)
which have all been grouped with one fix under 2218.  Some of these
sound like enhancements to me but since they appear to be addressing
function that was previously available in 1.0 but dropped from the
updated keystore portlet I assume they could be considered bug fixes.
Comments?


While I don't agree with your logic, I'm happy to consider this a bug
fix, because that way some improvements might actually be applied.

While just trying to get familiar with the keystore portlet as it
currently stands (w/o the 2218 patch) I managed to get serialization
errors that then reappeared each time I attempted to stop the server
(even with no additional changes).  I also managed to get the jetty
server into a state where it could not start with just two clicks of the
mouse from the portlet (one on the "unlocked" icon under "Available" for
the geronimo-default keystore and then a second click on then "locked"
icon attempting to undo what I did with the first click).   The result
was the following set of stack traces on server restart (kinda funny how
it wants me to unlock the keystore using the console when the server
itself won't even start).


It is unfortunate that you can hose the server this way.  But it's
correct that the HTTPS connectors shouldn't start if they lack a
correctly configured keystore.  I think the best solution would be for
the server to start up without HTTPS enabled, but that's a much larger
conversation (there was a decision made in 1.1 to bail on startup if
any GBean fails to start, and I'm not sure I agree).

If the patch in question changes the startup failure if the keystore
is locked, can you explain how it does it?  For now, it might be best
to have a confirm popup or screen if you lock a keystore that's
currently in use by a web connector, though that's not a very scalable
solution once things like CORBA (and perhaps EJB) start using these
keystores too.

Thanks,
    Aaron

Joe

Booting Geronimo Kernel (in Java 1.4.2_08)...
Starting Geronimo Application Server v1.1.1-SNAPSHOT
[*********>            ] 43%   8s Starting
geronimo/jetty/1.1.1-SNA...10:27:12,640 WARN  [SslListener] EXCEPTION
org.apache.geronimo.management.geronimo.KeystoreIsLocked: Keystore
'geronimo-default' is locked; please use the keystore page in the admin
console to unlock it
         at
org.apache.geronimo.security.keystore.FileKeystoreManager.createSSLServerFactory(FileKeystoreManager.java:300) 

         at
org.apache.geronimo.security.keystore.FileKeystoreManager$$FastClassByCGLIB$$4d9d2a71.invoke(<generated>) 

         at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
         at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38) 

         at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817) 

         at
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
         at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35) 

         at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96) 

         at
org.apache.geronimo.management.geronimo.KeystoreManager$$EnhancerByCGLIB$$be50f1ec.createSSLServerFactory(<generated>) 

         at
org.apache.geronimo.jetty.connector.GeronimoSSLListener.createFactory(GeronimoSSLListener.java:41) 

         at
org.mortbay.http.SslListener.newServerSocket(SslListener.java:283)
         at org.mortbay.util.ThreadedServer.open(ThreadedServer.java:477)
         at
org.apache.geronimo.jetty.connector.JettyConnector.doStart(JettyConnector.java:233) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:981) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:267) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.start(GBeanInstance.java:526) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency.attemptFullStart(GBeanDependency.java:111) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency.addTarget(GBeanDependency.java:146) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency$1.running(GBeanDependency.java:120) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor.fireRunningEvent(BasicLifecycleMonitor.java:173) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor.access$300(BasicLifecycleMonitor.java:41) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor$RawLifecycleBroadcaster.fireRunningEvent(BasicLifecycleMonitor.java:251) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:292) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.start(GBeanInstance.java:526) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency.attemptFullStart(GBeanDependency.java:111) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency.addTarget(GBeanDependency.java:146) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency$1.running(GBeanDependency.java:120) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor.fireRunningEvent(BasicLifecycleMonitor.java:173) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor.access$300(BasicLifecycleMonitor.java:41) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor$RawLifecycleBroadcaster.fireRunningEvent(BasicLifecycleMonitor.java:251) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:292) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:124) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:540) 

         at
org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:379) 

         at
org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:374) 

         at
org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:187) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:512) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:493) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager$$FastClassByCGLIB$$ce77a924.invoke(<generated>) 

         at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
         at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38) 

         at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817) 

         at
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
         at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35) 

         at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96) 

         at
org.apache.geronimo.kernel.config.EditableConfigurationManager$$EnhancerByCGLIB$$cd144e8e.startConfiguration(<generated>) 

         at
org.apache.geronimo.system.main.Daemon.doStartup(Daemon.java:297)
         at org.apache.geronimo.system.main.Daemon.<init>(Daemon.java:74)
         at org.apache.geronimo.system.main.Daemon.main(Daemon.java:377)
10:27:12,750 ERROR [GBeanInstanceState] Error while starting; GBean is
now in the FAILED state:
abstractName="geronimo/jetty/1.1.1-SNAPSHOT/car?ServiceModule=ge
ronimo/jetty/1.1.1-SNAPSHOT/car,j2eeType=GBean,name=JettySSLConnector"
java.io.IOException: Could not create JsseListener:
org.apache.geronimo.management.geronimo.KeystoreIsLocked: Keystore
'geronimo-default' is locked; please use
the keystore page in the admin console to unlock it
         at
org.mortbay.http.SslListener.newServerSocket(SslListener.java:314)
         at org.mortbay.util.ThreadedServer.open(ThreadedServer.java:477)
         at
org.apache.geronimo.jetty.connector.JettyConnector.doStart(JettyConnector.java:233) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:981) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:267) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.start(GBeanInstance.java:526) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency.attemptFullStart(GBeanDependency.java:111) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency.addTarget(GBeanDependency.java:146) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency$1.running(GBeanDependency.java:120) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor.fireRunningEvent(BasicLifecycleMonitor.java:173) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor.access$300(BasicLifecycleMonitor.java:41) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor$RawLifecycleBroadcaster.fireRunningEvent(BasicLifecycleMonitor.java:251) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:292) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.start(GBeanInstance.java:526) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency.attemptFullStart(GBeanDependency.java:111) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency.addTarget(GBeanDependency.java:146) 

         at
org.apache.geronimo.gbean.runtime.GBeanDependency$1.running(GBeanDependency.java:120) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor.fireRunningEvent(BasicLifecycleMonitor.java:173) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor.access$300(BasicLifecycleMonitor.java:41) 

         at
org.apache.geronimo.kernel.basic.BasicLifecycleMonitor$RawLifecycleBroadcaster.fireRunningEvent(BasicLifecycleMonitor.java:251) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:292) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:124) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:540) 

         at
org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:379) 

         at
org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:374) 

         at
org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:187) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:512) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:493) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager$$FastClassByCGLIB$$ce77a924.invoke(<generated>) 

         at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
         at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38) 

         at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817) 

         at
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
         at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35) 

         at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96) 

         at
org.apache.geronimo.kernel.config.EditableConfigurationManager$$EnhancerByCGLIB$$cd144e8e.startConfiguration(<generated>) 

         at
org.apache.geronimo.system.main.Daemon.doStartup(Daemon.java:297)
         at org.apache.geronimo.system.main.Daemon.<init>(Daemon.java:74)
         at org.apache.geronimo.system.main.Daemon.main(Daemon.java:377)
10:27:12,796 WARN  [SslListener] EXCEPTION
org.apache.geronimo.management.geronimo.KeystoreIsLocked: Keystore
'geronimo-default' is locked; please use the keystore page in the admin
console to unlock it
         at
org.apache.geronimo.security.keystore.FileKeystoreManager.createSSLServerFactory(FileKeystoreManager.java:300) 

         at
org.apache.geronimo.security.keystore.FileKeystoreManager$$FastClassByCGLIB$$4d9d2a71.invoke(<generated>) 

         at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
         at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38) 

         at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817) 

         at
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
         at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35) 

         at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96) 

         at
org.apache.geronimo.management.geronimo.KeystoreManager$$EnhancerByCGLIB$$be50f1ec.createSSLServerFactory(<generated>) 

         at
org.apache.geronimo.jetty.connector.GeronimoSSLListener.createFactory(GeronimoSSLListener.java:41) 

         at
org.mortbay.http.SslListener.newServerSocket(SslListener.java:283)
         at org.mortbay.util.ThreadedServer.open(ThreadedServer.java:477)
         at
org.apache.geronimo.jetty.connector.JettyConnector.doStart(JettyConnector.java:233) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:981) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:267) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:124) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:540) 

         at
org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:379) 

         at
org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:374) 

         at
org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:187) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:512) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:493) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager$$FastClassByCGLIB$$ce77a924.invoke(<generated>) 

         at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
         at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38) 

         at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817) 

         at
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
         at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35) 

         at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96) 

         at
org.apache.geronimo.kernel.config.EditableConfigurationManager$$EnhancerByCGLIB$$cd144e8e.startConfiguration(<generated>) 

         at
org.apache.geronimo.system.main.Daemon.doStartup(Daemon.java:297)
         at org.apache.geronimo.system.main.Daemon.<init>(Daemon.java:74)
         at org.apache.geronimo.system.main.Daemon.main(Daemon.java:377)
10:27:12,906 ERROR [GBeanInstanceState] Error while starting; GBean is
now in the FAILED state:
abstractName="geronimo/jetty/1.1.1-SNAPSHOT/car?ServiceModule=ge
ronimo/jetty/1.1.1-SNAPSHOT/car,j2eeType=GBean,name=JettySSLConnector"
java.io.IOException: Could not create JsseListener:
org.apache.geronimo.management.geronimo.KeystoreIsLocked: Keystore
'geronimo-default' is locked; please use
the keystore page in the admin console to unlock it
         at
org.mortbay.http.SslListener.newServerSocket(SslListener.java:314)
         at org.mortbay.util.ThreadedServer.open(ThreadedServer.java:477)
         at
org.apache.geronimo.jetty.connector.JettyConnector.doStart(JettyConnector.java:233) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:981) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:267) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:124) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:540) 

         at
org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:379) 

         at
org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:374) 

         at
org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:187) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:512) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:493) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager$$FastClassByCGLIB$$ce77a924.invoke(<generated>) 

         at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
         at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38) 

         at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817) 

         at
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
         at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35) 

         at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96) 

         at
org.apache.geronimo.kernel.config.EditableConfigurationManager$$EnhancerByCGLIB$$cd144e8e.startConfiguration(<generated>) 

         at
org.apache.geronimo.system.main.Daemon.doStartup(Daemon.java:297)
         at org.apache.geronimo.system.main.Daemon.<init>(Daemon.java:74)
         at org.apache.geronimo.system.main.Daemon.main(Daemon.java:377)
[*********>            ] 43%   9s Startup failed
org.apache.geronimo.kernel.config.LifecycleException: start of
geronimo/jetty/1.1.1-SNAPSHOT/car failed
         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:529) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:493) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager$$FastClassByCGLIB$$ce77a924.invoke(<generated>) 

         at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
         at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38) 

         at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817) 

         at
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
         at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35) 

         at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96) 

         at
org.apache.geronimo.kernel.config.EditableConfigurationManager$$EnhancerByCGLIB$$cd144e8e.startConfiguration(<generated>) 

         at
org.apache.geronimo.system.main.Daemon.doStartup(Daemon.java:297)
         at org.apache.geronimo.system.main.Daemon.<init>(Daemon.java:74)
         at org.apache.geronimo.system.main.Daemon.main(Daemon.java:377)
Caused by: org.apache.geronimo.kernel.config.InvalidConfigException:
Unknown start exception
         at
org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:440) 

         at
org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:187) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:512) 

         ... 13 more
Caused by: org.apache.geronimo.gbean.InvalidConfigurationException:
Configuration geronimo/jetty/1.1.1-SNAPSHOT/car failed to start due to
the following reasons
:
   The service
ServiceModule=geronimo/jetty/1.1.1-SNAPSHOT/car,j2eeType=GBean,name=JettySSLConnector 

did not start because the doStart method threw an exception.

java.io.IOException: Could not create JsseListener:
org.apache.geronimo.management.geronimo.KeystoreIsLocked: Keystore
'geronimo-default' is locked; please use
the keystore page in the admin console to unlock it
         at
org.mortbay.http.SslListener.newServerSocket(SslListener.java:314)
         at org.mortbay.util.ThreadedServer.open(ThreadedServer.java:477)
         at
org.apache.geronimo.jetty.connector.JettyConnector.doStart(JettyConnector.java:233) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:981) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:267) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:124) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:540) 

         at
org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:379) 

         at
org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:374) 

         at
org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:187) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:512) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:493) 

         at
org.apache.geronimo.kernel.config.SimpleConfigurationManager$$FastClassByCGLIB$$ce77a924.invoke(<generated>) 

         at net.sf.cglib.reflect.FastMethod.invoke(FastMethod.java:53)
         at
org.apache.geronimo.gbean.runtime.FastMethodInvoker.invoke(FastMethodInvoker.java:38) 

         at
org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:122) 

         at
org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:817) 

         at
org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
         at
org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35) 

         at
org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96) 

         at
org.apache.geronimo.kernel.config.EditableConfigurationManager$$EnhancerByCGLIB$$cd144e8e.startConfiguration(<generated>) 

         at
org.apache.geronimo.system.main.Daemon.doStartup(Daemon.java:297)
         at org.apache.geronimo.system.main.Daemon.<init>(Daemon.java:74)
         at org.apache.geronimo.system.main.Daemon.main(Daemon.java:377)


         at
org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:403) 

         ... 15 more
Server shutdown begun              tartup failed
Server shutdown completed