[Users] Joss fails to start ... Keystore was tampered.

[Sharad Mishra]

Quoting Doron Fediuck <dfediuck at redhat.com>:

> Thanks.
> Unfortunately the keystore is the most important file in the PKI
> area. Please try to recall your actions, and try to look for the
> keystore in case you moved / change folders or anything alike.
>
> Currently, the only valid solution for a lost keystore is re-installation.

I reinstalled ovirt-engine from source on a fresh rhel6.2 machine. I  
still do not see .keystore in /etc/pki/ovirt-engine. Now I get  
FileNotFoundException but engine is running.

2012-04-23 11:21:14,900 ERROR  
[org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC  
service thread 1-15) Failed to decryptjava.io.FileNotFoundException:  
.keystore (No such file or directory)
2012-04-23 11:21:14,900 ERROR  
[org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC  
service thread 1-15) Failed to decrypt value for property  
AdminPassword will be used encrypted value
2012-04-23 11:21:14,902 INFO  [org.ovirt.engine.core.bll.Backend] (MSC  
service thread 1-15) VDSBrokerFrontend: 4/23/12 11:21 AM

-Sharad Mishra

>
> On 19/04/12 22:40, snmishra at linux.vnet.ibm.com wrote:
>>
>> Quoting Doron Fediuck <dfediuck at redhat.com>:
>>
>>> Please check again using ls -la on that folder.
>>
>> Yes, I did run "ls -la" :-)
>>
>> -Sharad Mishra
>>
>>>
>>> Sent from my Android phone. Please ignore typos.
>>>
>>> -----Original Message-----
>>> From: snmishra at linux.vnet.ibm.com
>>> Received: Thursday, 19 Apr 2012, 20:38
>>> To: Ofer Schreiber [oschreib at redhat.com]
>>> CC: users at ovirt.org
>>> Subject: Re: [Users] Joss fails to start ... Keystore was tampered.
>>>
>>>
>>> Quoting Ofer Schreiber <oschreib at redhat.com>:
>>>
>>>> I'm trying to understand few things:
>>>> 1. Did you used RPM for deployment?
>>>
>>> No, it was from source. (git clone)
>>>
>>>> 2. Was it an UPGRADE for the engine?
>>>
>>> yes, I updated the source which was about a month old.
>>>
>>>> 3. Do you have /etc/pki/ovirt-engine/.keystore available? did it
>>>> changed recently?
>>>
>>> There is no .keystore in /etc/pki/ovirt-engine. But rest of the files
>>> in this directory were modified on 4/17 (certs, keys, private,
>>> requests). I was playing with kerberos for ldap on 17th so it is
>>> possible that I did something that messed up the server, and it was
>>> just coincidental that I upgraded the source next day and ran into
>>> this issue.
>>>
>>> Any help on how I can get out of it?
>>>
>>> -Sharad Mishra
>>>>
>>>> Ofer.
>>>>
>>>> ----- Original Message -----
>>>>>
>>>>> I had jboss running on my rhel6.2 machine. This morning I fetched
>>>>> latest engine source, built and deployed it. I did not see any
>>>>> errors.
>>>>> But now when I start jboss-as service I see following errors in
>>>>> engine.log -
>>>>>
>>>>> 2012-04-18 13:57:48,051 INFO  [org.ovirt.engine.core.bll.Backend]
>>>>> (MSC
>>>>> service thread 1-5) Start time: 4/18/12 1:57 PM
>>>>> 2012-04-18 13:57:48,204 ERROR
>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>> was
>>>>> tampered with, or password was incorrect
>>>>> 2012-04-18 13:57:48,204 ERROR
>>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
>>>>> service thread 1-5) Failed to decrypt value for property
>>>>> LocalAdminPassword will be used encrypted value
>>>>> 2012-04-18 13:57:48,209 WARN
>>>>> [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread
>>>>> 1-5)
>>>>> Could not find enum value for option: NetConsolePort
>>>>> 2012-04-18 13:57:48,212 ERROR
>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>> was
>>>>> tampered with, or password was incorrect
>>>>> 2012-04-18 13:57:48,212 ERROR
>>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
>>>>> service thread 1-5) Failed to decrypt value for property
>>>>> CertificatePassword will be used encrypted value
>>>>> 2012-04-18 13:57:48,214 ERROR
>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>> was
>>>>> tampered with, or password was incorrect
>>>>>
>>>>> Regards,
>>>>> Sharad Mishra
>>>>> IBM
>>>>>
>>>>> _______________________________________________
>>>>> Users mailing list
>>>>> Users at ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users at ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>> Sent from my Android phone. Please ignore typos.
>>
>>
>>