Hi

I am trying to follow the steps here: http://wso2.org/project/solutions/identity/1.5/docs/idp_production.html and have added a test CA and server certificate, however, I am now unable to start the Identity Solution (all works fine in the localhost configuration). Here is the error thrown:

INFO [2008-05-02 13:06:51,423] Starting WSO2 Identity Solution 1.5 (Powered by Apache Axis2) INFO [2008-05-02 13:06:51,424] Using Java Home : /usr/lib/ jvm/java-1.5.0-sun-1.5.0.15/jre
 INFO [2008-05-02 13:06:51,424]  Using Java Version     : 1.5.0_15
INFO [2008-05-02 13:06:51,425] Using WSO2 Identity Solution Home : . INFO [2008-05-02 13:06:55,467] Using Server Info Class: org.wso2.wsas.serverinfo.EmbeddedTomcatServerInfo
java.security.InvalidKeyException: Wrong key usage
        at javax.crypto.Cipher.init(DashoA12275)
        at javax.crypto.Cipher.init(DashoA12275)
        at org.wso2.utils.security.CryptoUtil.encrypt(CryptoUtil.java:76)
at org .wso2.utils.security.CryptoUtil.encryptAndBase64Encode(CryptoUtil.java: 97) at org.wso2.wsas.util.KeyStoreUtil.persistKeyStore(KeyStoreUtil.java: 85) at org.wso2.wsas.ServerManager.persistSecurityKeyStore(ServerManager.java: 147)
        at org.wso2.wsas.ServerManager.start(ServerManager.java:101)
        at org.wso2.wsas.MainServlet.start(MainServlet.java:249)
        at org.wso2.wsas.MainServlet.init(MainServlet.java:185)
at org .apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java: 1105) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java: 932) at org .apache .catalina.core.StandardContext.loadOnStartup(StandardContext.java:3915) at org.apache.catalina.core.StandardContext.start(StandardContext.java: 4176) at org .apache .catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java: 739) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java: 524) at org .wso2.wsas.TomcatRepositoryListener.run(TomcatRepositoryListener.java: 111)
        at java.lang.Thread.run(Thread.java:595)
FATAL [2008-05-02 13:07:08,378]  Cannot start WSO2 WSAS
org.wso2.utils.ServerException: Cannot encrypt WSO2 WSAS store and/or private key passwords at org.wso2.wsas.util.KeyStoreUtil.persistKeyStore(KeyStoreUtil.java: 90) at org.wso2.wsas.ServerManager.persistSecurityKeyStore(ServerManager.java: 147)
        at org.wso2.wsas.ServerManager.start(ServerManager.java:101)
        at org.wso2.wsas.MainServlet.start(MainServlet.java:249)
        at org.wso2.wsas.MainServlet.init(MainServlet.java:185)
at org .apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java: 1105) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java: 932) at org .apache .catalina.core.StandardContext.loadOnStartup(StandardContext.java:3915) at org.apache.catalina.core.StandardContext.start(StandardContext.java: 4176) at org .apache .catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java: 739) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java: 524) at org .wso2.wsas.TomcatRepositoryListener.run(TomcatRepositoryListener.java: 111)
        at java.lang.Thread.run(Thread.java:595)
Caused by: org.wso2.utils.security.CryptoException: Error during encryption
        at org.wso2.utils.security.CryptoUtil.encrypt(CryptoUtil.java:82)
at org .wso2.utils.security.CryptoUtil.encryptAndBase64Encode(CryptoUtil.java: 97) at org.wso2.wsas.util.KeyStoreUtil.persistKeyStore(KeyStoreUtil.java: 85)
        ... 13 more
Caused by: java.security.InvalidKeyException: Wrong key usage
        at javax.crypto.Cipher.init(DashoA12275)
        at javax.crypto.Cipher.init(DashoA12275)
        at org.wso2.utils.security.CryptoUtil.encrypt(CryptoUtil.java:76)
        ... 15 more
FATAL [2008-05-02 13:07:08,380]  Could not start WSO2 Identity Solution
org.wso2.utils.ServerException: WSO2 Identity Solution startup failed.
        at org.wso2.wsas.MainServlet.start(MainServlet.java:260)
        at org.wso2.wsas.MainServlet.init(MainServlet.java:185)
at org .apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java: 1105) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java: 932) at org .apache .catalina.core.StandardContext.loadOnStartup(StandardContext.java:3915) at org.apache.catalina.core.StandardContext.start(StandardContext.java: 4176) at org .apache .catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java: 739) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java: 524) at org .wso2.wsas.TomcatRepositoryListener.run(TomcatRepositoryListener.java: 111)
        at java.lang.Thread.run(Thread.java:595)
Caused by: org.wso2.utils.ServerException: Cannot start WSO2 WSAS
        at org.wso2.wsas.ServerManager.start(ServerManager.java:138)
        at org.wso2.wsas.MainServlet.start(MainServlet.java:249)
        ... 10 more
Caused by: org.wso2.utils.ServerException: Cannot encrypt WSO2 WSAS store and/or private key passwords at org.wso2.wsas.util.KeyStoreUtil.persistKeyStore(KeyStoreUtil.java: 90) at org.wso2.wsas.ServerManager.persistSecurityKeyStore(ServerManager.java: 147)
        at org.wso2.wsas.ServerManager.start(ServerManager.java:101)
        ... 11 more
Caused by: org.wso2.utils.security.CryptoException: Error during encryption
        at org.wso2.utils.security.CryptoUtil.encrypt(CryptoUtil.java:82)
at org .wso2.utils.security.CryptoUtil.encryptAndBase64Encode(CryptoUtil.java: 97) at org.wso2.wsas.util.KeyStoreUtil.persistKeyStore(KeyStoreUtil.java: 85)
        ... 13 more
Caused by: java.security.InvalidKeyException: Wrong key usage
        at javax.crypto.Cipher.init(DashoA12275)
        at javax.crypto.Cipher.init(DashoA12275)
        at org.wso2.utils.security.CryptoUtil.encrypt(CryptoUtil.java:76)
        ... 15 more
ERROR [2008-05-02 13:07:08,412]  Servlet /wsas threw load() exception
javax.servlet.ServletException: Could not start WSO2 Identity Solution
        at org.wso2.wsas.MainServlet.init(MainServlet.java:189)
at org .apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java: 1105) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java: 932) at org .apache .catalina.core.StandardContext.loadOnStartup(StandardContext.java:3915) at org.apache.catalina.core.StandardContext.start(StandardContext.java: 4176) at org .apache .catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java: 739) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java: 524) at org .wso2.wsas.TomcatRepositoryListener.run(TomcatRepositoryListener.java: 111)
        at java.lang.Thread.run(Thread.java:595)
ERROR [2008-05-02 13:07:08,412]  Servlet /wsas threw load() exception
javax.servlet.ServletException: Could not start WSO2 Identity Solution
        at org.wso2.wsas.MainServlet.init(MainServlet.java:189)
at org .apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java: 1105) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java: 932) at org .apache .catalina.core.StandardContext.loadOnStartup(StandardContext.java:3915) at org.apache.catalina.core.StandardContext.start(StandardContext.java: 4176) at org .apache .catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java: 739) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java: 524) at org .wso2.wsas.TomcatRepositoryListener.run(TomcatRepositoryListener.java: 111)
        at java.lang.Thread.run(Thread.java:595)

This error occurs whether I add my test certificates to the existing wso2is.jks store, or whether I create a new store holding just my test keys. I have tried this several times to (hopefully) eliminate idiocies like mistyping keystore passwords. My test CA has a 2048 bit RSA public key - could this be the source of the problem?

Cheers

Miles

_______________________________________________
Identity-dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/identity-dev

Reply via email to