NetWorker: java.io.IOException: Ugyldigt keystore-format
Summary: Kan ikke vise eller ændre NetWorker AUTHC- eller NetWorker Web User Interface-nøglelagerfiler (NWUI) ved hjælp af java keytool.
Symptoms
NetWorker Authentication (AUTHC)-serveren eller NetWorker Web User Interface-serveren (NWUI) omfatter Java Runtime Environment (JRE). Dette løses typisk ved hjælp af NetWorker Runtime Environment (NRE).
Linux: /opt/nre/java/latest
Windows: C:\Program Files\NRE\java\jre#.#.#_###
Når du bruger keytool kommando til at gennemse NetWorker authc/NWUI keystore-filer, vises en java-fejl:
[root@nsr bin]# keytool -list -keystore /nsr/authc/conf/authc.keystore Enter keystore password: keytool error: java.io.IOException: Invalid keystore format
Denne fejl vises, selv når du kører keytool kommando direkte fra NRE java bin-biblioteket.
NetWorker Server Keystore-filer:
-
/nsr/authc/conf/authc.keystore/nsr/authc/conf/authc.truststore/opt/nsr/authc-server/conf/authc.truststore/opt/nre/java/latest/lib/security/cacerts
-
C:\Program Files\EMC NetWorker\nsr\authc-server\conf\authc.truststoreC:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\conf\authc.keystoreC:\Program Files\NRE\java\jre##.#_###\lib\security\cacerts
-
/nsr/nwui/monitoring/app/conf/nwui.keystore/opt/nre/java/latest/cacerts
-
C:\Program Files\EMC NetWorker\nwui\monitoring\app\conf\nwui.keystoreC:\Program Files\NRE\java\jre#.#.#_###\lib\security\cacerts
Cause
Der er en anden version af Oracle Java Runtime Environment (JRE) installeret på værten. Oracle JRE-installationen forstyrrer NRE.
Resolution
Det anbefales at bruge NetWorker Runtime Environment (NRE) sammen med NetWorker-programmer. NetWorker-serverens AUTHC-installationslog identificerer, hvilken "Java-sti" der blev brugt:
/opt/nsr/authc-server/logs/install.log
[root@nsr ~]# cat /opt/nsr/authc-server/logs/install.log | grep "Java Path" Java Path Yes /opt/nre/java/latest Java Path Yes /opt/nre/java/latest Java Path Yes /opt/nre/java/latestWindows:
%LOCALAPPDATA%\Temp\NetWorker_YYYYMMDDHHmmSS_#_AuthC.log
JAVAHOME = C:\Program Files\NRE\java\jre1.8.0_471Alternativt kan du fra en administrativ kommandoprompt køre:
echo %NSR_JAVA_HOME%
$env:NSR_JAVA_HOME
C:\Users\Administrator.NETWORKER>echo %NSR_JAVA_HOME% C:\Program Files\NRE\java\jre1.8.0_471 PS C:\Users\Administrator.NETWORKER> $env:NSR_JAVA_HOME C:\Program Files\NRE\java\jre1.8.0_471
Brug en kommandolinjevariabel til at gennemtvinge keytool brug fra NRE:
Linux:
keytool=/opt/nre/java/latest/bin/keytool
Eksempel:
[root@nsr ~]# keytool=/opt/nre/java/latest/bin/keytool
Kør alle keytool-kommandoer ved hjælp af variablen:
[root@nsr ~]# $keytool Key and Certificate Management Tool Commands: -certreq Generates a certificate request -changealias Changes an entry's alias -delete Deletes an entry -exportcert Exports certificate -genkeypair Generates a key pair -genseckey Generates a secret key -gencert Generates certificate from a certificate request -importcert Imports a certificate or a certificate chain -importpass Imports a password -importkeystore Imports one or all entries from another keystore -keypasswd Changes the key password of an entry -list Lists entries in a keystore -printcert Prints the content of a certificate -printcertreq Prints the content of a certificate request -printcrl Prints the content of a CRL file -storepasswd Changes the store password of a keystore Use "keytool -command_name -help" for usage of command_name
Windows:
Brug NSR_JAVA_HOME for at køre kommandoer fra NRE bin Register.
Eksempel på kommandoprompt:
"%NSR_JAVA_HOME%\bin\keytool.exe" OPTIONS
PowerShell-eksempel:
& "$env:NSR_JAVA_HOME\bin\keytool.exe" OPTIONS
C:\Users\Administrator.NETWORKER>"%NSR_JAVA_HOME%\bin\keytool.exe" Key and Certificate Management Tool Commands: -certreq Generates a certificate request -changealias Changes an entry's alias -delete Deletes an entry -exportcert Exports certificate -genkeypair Generates a key pair -genseckey Generates a secret key -gencert Generates certificate from a certificate request -importcert Imports a certificate or a certificate chain -importpass Imports a password -importkeystore Imports one or all entries from another keystore -keypasswd Changes the key password of an entry -list Lists entries in a keystore -printcert Prints the content of a certificate -printcertreq Prints the content of a certificate request -printcrl Prints the content of a CRL file -storepasswd Changes the store password of a keystore Use "keytool -command_name -help" for usage of command_name ............................................................................................................................................................................. PS C:\Users\Administrator.NETWORKER> & "$env:NSR_JAVA_HOME\bin\keytool.exe" Key and Certificate Management Tool Commands: -certreq Generates a certificate request -changealias Changes an entry's alias -delete Deletes an entry -exportcert Exports certificate -genkeypair Generates a key pair -genseckey Generates a secret key -gencert Generates certificate from a certificate request -importcert Imports a certificate or a certificate chain -importpass Imports a password -importkeystore Imports one or all entries from another keystore -keypasswd Changes the key password of an entry -list Lists entries in a keystore -printcert Prints the content of a certificate -printcertreq Prints the content of a certificate request -printcrl Prints the content of a CRL file -storepasswd Changes the store password of a keystore Use "keytool -command_name -help" for usage of command_name
Hvis NetWorker bruger NetWorker Runtime Environment (NRE), og der er installeret et andet Oracle Java Runtime Environment (JRE), skal du fjerne Oracle JRE-pakken.
Linux:
- Se efter en anden JRE-installation, følgende kommandoer kan bruges; Kontakt dog din Linux-systemadministrator:
rpm -qa --last | grep jre find / -name java -type f
/etc/alternatives /usr/bin/java /usr/lib/jreX
- Hvis en anden JRE-pakke er installeret, skal du kontakte Linux-systemadministratoren, hvis den kan fjernes.
rpm -e package_name
Windows:
- Åbn Windows Kontrolpanel -> Programmer og funktioner.
- Gennemse listen for en Oracle Java Runtime Environment-pakke (undtagen NetWorker Runtime Environment).
- Hvis Oracle Java Runtime Environment er installeret, skal du kontakte Windows Systemadministrator, hvis det kan fjernes.
- Afinstaller Oracle Java Runtime Environment fra systemet.
- Åbn en ny kommandopromptsession for at køre keytool-kommandoer, når Oracle JRE er blevet fjernet.
Additional Information
- NetWorker: Sådan identificeres, hvilken server der er godkendelsesserveren, der bruges af NMC og NWUI
- NetWorker: Sådan konfigureres LDAPS-godkendelse
- NetWorker: Sådan importeres eller erstattes certifikatmyndighedssignerede certifikater for "AUTHC" og "NWUI" (Linux)
- NetWorker: Sådan importeres eller erstattes certifikatmyndighedssignerede certifikater for "AUTHC" og "NWUI" (Windows)