[ 
https://issues.apache.org/jira/browse/NIFIREG-343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16964280#comment-16964280
 ] 

Bryan Bende commented on NIFIREG-343:
-------------------------------------

Looks like JettyServer has these lines backwards:
{code:java}
contextFactory.setKeyManagerPassword(keystorePassword);
contextFactory.setKeyStorePassword(defaultKeyPassword); {code}

> NiFi Registry fails to start when keystorePassword and keyPassword are 
> different
> --------------------------------------------------------------------------------
>
>                 Key: NIFIREG-343
>                 URL: https://issues.apache.org/jira/browse/NIFIREG-343
>             Project: NiFi Registry
>          Issue Type: Bug
>    Affects Versions: 0.5.0
>            Reporter: Bryan Bende
>            Priority: Minor
>
> {code:java}
> 2019-10-31 17:34:50,044 WARN [main] o.apache.nifi.registry.jetty.JettyServer 
> Failed to start web server... shutting down.java.io.IOException: Keystore was 
> tampered with, or password was incorrect    
> at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:780) 
> ~[na:1.8.0_112]    
> at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56) 
> ~[na:1.8.0_112]    
> at 
> sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
>  ~[na:1.8.0_112]    
> at 
> sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
>  ~[na:1.8.0_112]    
> at java.security.KeyStore.load(KeyStore.java:1445) ~[na:1.8.0_112]    
> at 
> org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:52)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.ssl.SslContextFactory.loadKeyStore(SslContextFactory.java:998)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:252) 
> ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:219)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:131)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:113)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:72)
>  ~[jetty-server-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:131)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:113)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:270)
>  ~[jetty-server-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
>  ~[jetty-server-9.4.3.v20170317.jar:9.4.3.v20170317]   
> at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236) 
> ~[jetty-server-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at org.eclipse.jetty.server.Server.doStart(Server.java:431) 
> ~[jetty-server-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at 
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>  ~[jetty-util-9.4.3.v20170317.jar:9.4.3.v20170317]    
> at org.apache.nifi.registry.jetty.JettyServer.start(JettyServer.java:331) 
> ~[nifi-registry-jetty]    
> at org.apache.nifi.registry.NiFiRegistry.<init>(NiFiRegistry.java:110) 
> [nifi-registry-runtime]    
> at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:158) 
> [nifi-registry-runtime]
> Caused by: java.security.UnrecoverableKeyException: Password verification 
> failed    
> at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:778) 
> ~[na:1.8.0_112]    
> ... 24 common frames omitted {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to