NetWorker: java.io.IOException: Ugyldigt keystore-format

NetWorker Authentication (AUTHC)-serveren eller NetWorker Web User Interface-serveren (NWUI) omfatter Java Runtime Environment (JRE). Dette løses typisk ved hjælp af NetWorker Runtime Environment (NRE).

Linux: /opt/nre/java/latest
Windows: C:\Program Files\NRE\java\jre#.#.#_###

Når du bruger keytool kommando til at gennemse NetWorker authc/NWUI keystore-filer, vises en java-fejl:

[root@nsr bin]# keytool -list -keystore /nsr/authc/conf/authc.keystore
 Enter keystore password:
 keytool error: java.io.IOException: Invalid keystore format

Denne fejl vises, selv når du kører keytool kommando direkte fra NRE java bin-biblioteket.

NetWorker Server Keystore-filer:

• • /nsr/authc/conf/authc.keystore
  • /nsr/authc/conf/authc.truststore
  • /opt/nsr/authc-server/conf/authc.truststore
  • /opt/nre/java/latest/lib/security/cacerts

• • C:\Program Files\EMC NetWorker\nsr\authc-server\conf\authc.truststore
  • C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\conf\authc.keystore
  • C:\Program Files\NRE\java\jre##.#_###\lib\security\cacerts

• • /nsr/nwui/monitoring/app/conf/nwui.keystore
  • /opt/nre/java/latest/cacerts

• • C:\Program Files\EMC NetWorker\nwui\monitoring\app\conf\nwui.keystore
  • C:\Program Files\NRE\java\jre#.#.#_###\lib\security\cacerts

Der er en anden version af Oracle Java Runtime Environment (JRE) installeret på værten. Oracle JRE-installationen forstyrrer NRE.

Det anbefales at bruge NetWorker Runtime Environment (NRE) sammen med NetWorker-programmer. NetWorker-serverens AUTHC-installationslog identificerer, hvilken "Java-sti" der blev brugt:

[root@nsr ~]# cat /opt/nsr/authc-server/logs/install.log | grep "Java Path"
Java Path            Yes        /opt/nre/java/latest
Java Path            Yes        /opt/nre/java/latest
Java Path            Yes        /opt/nre/java/latest

JAVAHOME = C:\Program Files\NRE\java\jre1.8.0_471

echo %NSR_JAVA_HOME%

$env:NSR_JAVA_HOME

C:\Users\Administrator.NETWORKER>echo %NSR_JAVA_HOME%
C:\Program Files\NRE\java\jre1.8.0_471

PS C:\Users\Administrator.NETWORKER> $env:NSR_JAVA_HOME
C:\Program Files\NRE\java\jre1.8.0_471

Brug en kommandolinjevariabel til at gennemtvinge keytool brug fra NRE:

Linux:

keytool=/opt/nre/java/latest/bin/keytool

Eksempel:

[root@nsr ~]# keytool=/opt/nre/java/latest/bin/keytool

Kør alle keytool-kommandoer ved hjælp af variablen:

[root@nsr ~]# $keytool
Key and Certificate Management Tool

Commands:

 -certreq            Generates a certificate request
 -changealias        Changes an entry's alias
 -delete             Deletes an entry
 -exportcert         Exports certificate
 -genkeypair         Generates a key pair
 -genseckey          Generates a secret key
 -gencert            Generates certificate from a certificate request
 -importcert         Imports a certificate or a certificate chain
 -importpass         Imports a password
 -importkeystore     Imports one or all entries from another keystore
 -keypasswd          Changes the key password of an entry
 -list               Lists entries in a keystore
 -printcert          Prints the content of a certificate
 -printcertreq       Prints the content of a certificate request
 -printcrl           Prints the content of a CRL file
 -storepasswd        Changes the store password of a keystore

Use "keytool -command_name -help" for usage of command_name

Windows:

Brug NSR_JAVA_HOME for at køre kommandoer fra NRE bin Register.

Eksempel på kommandoprompt:

"%NSR_JAVA_HOME%\bin\keytool.exe" OPTIONS

PowerShell-eksempel:

& "$env:NSR_JAVA_HOME\bin\keytool.exe" OPTIONS

C:\Users\Administrator.NETWORKER>"%NSR_JAVA_HOME%\bin\keytool.exe"
Key and Certificate Management Tool

Commands:

 -certreq            Generates a certificate request
 -changealias        Changes an entry's alias
 -delete             Deletes an entry
 -exportcert         Exports certificate
 -genkeypair         Generates a key pair
 -genseckey          Generates a secret key
 -gencert            Generates certificate from a certificate request
 -importcert         Imports a certificate or a certificate chain
 -importpass         Imports a password
 -importkeystore     Imports one or all entries from another keystore
 -keypasswd          Changes the key password of an entry
 -list               Lists entries in a keystore
 -printcert          Prints the content of a certificate
 -printcertreq       Prints the content of a certificate request
 -printcrl           Prints the content of a CRL file
 -storepasswd        Changes the store password of a keystore

Use "keytool -command_name -help" for usage of command_name
.............................................................................................................................................................................
PS C:\Users\Administrator.NETWORKER> & "$env:NSR_JAVA_HOME\bin\keytool.exe"
Key and Certificate Management Tool

Commands:

 -certreq            Generates a certificate request
 -changealias        Changes an entry's alias
 -delete             Deletes an entry
 -exportcert         Exports certificate
 -genkeypair         Generates a key pair
 -genseckey          Generates a secret key
 -gencert            Generates certificate from a certificate request
 -importcert         Imports a certificate or a certificate chain
 -importpass         Imports a password
 -importkeystore     Imports one or all entries from another keystore
 -keypasswd          Changes the key password of an entry
 -list               Lists entries in a keystore
 -printcert          Prints the content of a certificate
 -printcertreq       Prints the content of a certificate request
 -printcrl           Prints the content of a CRL file
 -storepasswd        Changes the store password of a keystore

Use "keytool -command_name -help" for usage of command_name

Hvis NetWorker bruger NetWorker Runtime Environment (NRE), og der er installeret et andet Oracle Java Runtime Environment (JRE), skal du fjerne Oracle JRE-pakken.

Linux:

1. Se efter en anden JRE-installation, følgende kommandoer kan bruges; Kontakt dog din Linux-systemadministrator:

rpm -qa --last | grep jre
find / -name java -type f

/etc/alternatives
/usr/bin/java
/usr/lib/jreX

rpm -e package_name

Windows: 

1. Åbn Windows Kontrolpanel -> Programmer og funktioner.
2. Gennemse listen for en Oracle Java Runtime Environment-pakke (undtagen NetWorker Runtime Environment).
3. Hvis Oracle Java Runtime Environment er installeret, skal du kontakte Windows Systemadministrator, hvis det kan fjernes.
4. Afinstaller Oracle Java Runtime Environment fra systemet.
5. Åbn en ny kommandopromptsession for at køre keytool-kommandoer, når Oracle JRE er blevet fjernet.

• NetWorker: Sådan identificeres, hvilken server der er godkendelsesserveren, der bruges af NMC og NWUI
• NetWorker: Sådan konfigureres LDAPS-godkendelse
• NetWorker: Sådan importeres eller erstattes certifikatmyndighedssignerede certifikater for "AUTHC" og "NWUI" (Linux)
• NetWorker: Sådan importeres eller erstattes certifikatmyndighedssignerede certifikater for "AUTHC" og "NWUI" (Windows)