Quoting Doron Fediuck <dfediuck(a)redhat.com>:
Thanks.
Unfortunately the keystore is the most important file in the PKI
area. Please try to recall your actions, and try to look for the
keystore in case you moved / change folders or anything alike.
Currently, the only valid solution for a lost keystore is re-installation.
I reinstalled ovirt-engine from source on a fresh rhel6.2 machine. I
still do not see .keystore in /etc/pki/ovirt-engine. Now I get
FileNotFoundException but engine is running.
2012-04-23 11:21:14,900 ERROR
[org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
service thread 1-15) Failed to decryptjava.io.FileNotFoundException:
.keystore (No such file or directory)
2012-04-23 11:21:14,900 ERROR
[org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
service thread 1-15) Failed to decrypt value for property
AdminPassword will be used encrypted value
2012-04-23 11:21:14,902 INFO [org.ovirt.engine.core.bll.Backend] (MSC
service thread 1-15) VDSBrokerFrontend: 4/23/12 11:21 AM
-Sharad Mishra
On 19/04/12 22:40, snmishra(a)linux.vnet.ibm.com wrote:
>
> Quoting Doron Fediuck <dfediuck(a)redhat.com>:
>
>> Please check again using ls -la on that folder.
>
> Yes, I did run "ls -la" :-)
>
> -Sharad Mishra
>
>>
>> Sent from my Android phone. Please ignore typos.
>>
>> -----Original Message-----
>> From: snmishra(a)linux.vnet.ibm.com
>> Received: Thursday, 19 Apr 2012, 20:38
>> To: Ofer Schreiber [oschreib(a)redhat.com]
>> CC: users(a)ovirt.org
>> Subject: Re: [Users] Joss fails to start ... Keystore was tampered.
>>
>>
>> Quoting Ofer Schreiber <oschreib(a)redhat.com>:
>>
>>> I'm trying to understand few things:
>>> 1. Did you used RPM for deployment?
>>
>> No, it was from source. (git clone)
>>
>>> 2. Was it an UPGRADE for the engine?
>>
>> yes, I updated the source which was about a month old.
>>
>>> 3. Do you have /etc/pki/ovirt-engine/.keystore available? did it
>>> changed recently?
>>
>> There is no .keystore in /etc/pki/ovirt-engine. But rest of the files
>> in this directory were modified on 4/17 (certs, keys, private,
>> requests). I was playing with kerberos for ldap on 17th so it is
>> possible that I did something that messed up the server, and it was
>> just coincidental that I upgraded the source next day and ran into
>> this issue.
>>
>> Any help on how I can get out of it?
>>
>> -Sharad Mishra
>>>
>>> Ofer.
>>>
>>> ----- Original Message -----
>>>>
>>>> I had jboss running on my rhel6.2 machine. This morning I fetched
>>>> latest engine source, built and deployed it. I did not see any
>>>> errors.
>>>> But now when I start jboss-as service I see following errors in
>>>> engine.log -
>>>>
>>>> 2012-04-18 13:57:48,051 INFO [org.ovirt.engine.core.bll.Backend]
>>>> (MSC
>>>> service thread 1-5) Start time: 4/18/12 1:57 PM
>>>> 2012-04-18 13:57:48,204 ERROR
>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>> was
>>>> tampered with, or password was incorrect
>>>> 2012-04-18 13:57:48,204 ERROR
>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
>>>> service thread 1-5) Failed to decrypt value for property
>>>> LocalAdminPassword will be used encrypted value
>>>> 2012-04-18 13:57:48,209 WARN
>>>> [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread
>>>> 1-5)
>>>> Could not find enum value for option: NetConsolePort
>>>> 2012-04-18 13:57:48,212 ERROR
>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>> was
>>>> tampered with, or password was incorrect
>>>> 2012-04-18 13:57:48,212 ERROR
>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
>>>> service thread 1-5) Failed to decrypt value for property
>>>> CertificatePassword will be used encrypted value
>>>> 2012-04-18 13:57:48,214 ERROR
>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>> was
>>>> tampered with, or password was incorrect
>>>>
>>>> Regards,
>>>> Sharad Mishra
>>>> IBM
>>>>
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users(a)ovirt.org
>>>>
http://lists.ovirt.org/mailman/listinfo/users
>>>>
>>
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>>
http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>> Sent from my Android phone. Please ignore typos.
>
>
>