Command central is not listening on https port 8091

Dear Team,

I was replacing the default certificate with our created certificate editing the https port 8091 of command central. Just after providing the location of .jks file I mistakenly saved it without replacing the correct keystore password. Now server is only listening on 8090 (http) port but not on 8091(https).
I thought to login with http port 8090 and correct the configuration but server is getting redirected to 8091 and admin page of command central is not opening. Could you please let me know how to fix this issue.

Error- 2020/11/20 10:25:29 WARN # SSLHostConfig The protocol [TLSv1.1] was added to the list of protocols on the SSLHostConfig named [default]. Check if a +/- prefix is missing.
2020/11/20 10:25:29 WARN # SSLHostConfig The protocol [TLSv1.2] was added to the list of protocols on the SSLHostConfig named [default]. Check if a +/- prefix is missing.
2020/11/20 10:25:29 ERROR # StandardService Failed to start connector [Connector[com.softwareag.platform.catalina.connector.Http11NioProtocolCheckSSLBeforeBind-8091]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1077) ~[org.apache.catalina_8.5.57.jar:?]
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136) ~[org.apache.catalina_8.5.57.jar:?]
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:173) ~[org.apache.catalina_8.5.57.jar:?]
at org.apache.catalina.core.StandardService.addConnector(StandardService.java:225) [org.apache.catalina_8.5.57.jar:?]
at com.softwareag.platform.catalina.setup.internal.DynamicConnectors$DynamicConnectorRegistration.registering(DynamicConnectors.java:249) [com.softwareag.platform.catalina.setup_10.5.0.0000-0444.jar:10.5.0.0000-0444]
at com.softwareag.platform.catalina.setup.internal.ConnectorRegistration.open(ConnectorRegistration.java:61) [com.softwareag.platform.catalina.setup_10.5.0.0000-0444.jar:10.5.0.0000-0444]
at com.softwareag.platform.catalina.setup.internal.DynamicConnectors.updated(DynamicConnectors.java:179) [com.softwareag.platform.catalina.setup_10.5.0.0000-0444.jar:10.5.0.0000-0444]
at org.eclipse.equinox.internal.cm.ManagedServiceFactoryTracker$2.run(ManagedServiceFactoryTracker.java:284) [org.eclipse.equinox.cm_1.4.0.v20190117-0418.jar:?]
at org.eclipse.equinox.internal.cm.SerializedTaskQueue$1.run(SerializedTaskQueue.java:40) [org.eclipse.equinox.cm_1.4.0.v20190117-0418.jar:?]
Caused by: java.lang.IllegalArgumentException: Keystore was tampered with, or password was incorrect
at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:100) ~[org.apache.coyote_8.5.57.jar:?]
at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:72) ~[org.apache.coyote_8.5.57.jar:?]
at com.softwareag.platform.catalina.connector.NioEndpointCheckSSLBeforeBind.bind(NioEndpointCheckSSLBeforeBind.java:37) ~[com.softwareag.platform.catalina.registrator_10.5.0.0000-0444.jar:10.5.0.0000-0444]
at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1118) ~[org.apache.coyote_8.5.57.jar:?]
at org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.java:222) ~[org.apache.coyote_8.5.57.jar:?]
at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:587) ~[org.apache.coyote_8.5.57.jar:?]
at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:74) ~[org.apache.coyote_8.5.57.jar:?]
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1075) ~[org.apache.catalina_8.5.57.jar:?]
… 8 more
Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect


2020/11/20 09:47:02 WARN # SSLHostConfig The protocol [TLSv1.1] was added to the list of protocols on the SSLHostConfig named [default]. Check if a +/- prefix is missing.
2020/11/20 09:47:02 WARN # SSLHostConfig The protocol [TLSv1.2] was added to the list of protocols on the SSLHostConfig named [default]. Check if a +/- prefix is missing.
2020/11/20 09:47:02 ERROR # StandardService Failed to start connector [Connector[com.softwareag.platform.catalina.connector.Http11NioProtocolCheckSSLBeforeBind-8091]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1077) ~[org.apache.catalina_8.5.57.jar:?]
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136) ~[org.apache.catalina_8.5.57.jar:?]
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:173) ~[org.apache.catalina_8.5.57.jar:?]
at org.apache.catalina.core.StandardService.addConnector(StandardService.java:225) [org.apache.catalina_8.5.57.jar:?]
at com.softwareag.platform.catalina.setup.internal.DynamicConnectors$DynamicConnectorRegistration.registering(DynamicConnectors.java:249) [com.softwareag.platform.catalina.setup_10.5.0.0000-0444.jar:10.5.0.0000-0444]
at com.softwareag.platform.catalina.setup.internal.ConnectorRegistration.open(ConnectorRegistration.java:61) [com.softwareag.platform.catalina.setup_10.5.0.0000-0444.jar:10.5.0.0000-0444]
at com.softwareag.platform.catalina.setup.internal.DynamicConnectors.updated(DynamicConnectors.java:179) [com.softwareag.platform.catalina.setup_10.5.0.0000-0444.jar:10.5.0.0000-0444]
at org.eclipse.equinox.internal.cm.ManagedServiceFactoryTracker$2.run(ManagedServiceFactoryTracker.java:284) [org.eclipse.equinox.cm_1.4.0.v20190117-0418.jar:?]
at org.eclipse.equinox.internal.cm.SerializedTaskQueue$1.run(SerializedTaskQueue.java:40) [org.eclipse.equinox.cm_1.4.0.v20190117-0418.jar:?]
Caused by: java.lang.IllegalArgumentException: Alias name [spmnode] does not identify a key entry
at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:100) ~[org.apache.coyote_8.5.57.jar:?]

image

Thanks in advance.

Thanks
Shahin

Hi Shahin,

you can try to restore the default certificate and restart again.

Or you can try to figure out where in the properties the keystore password is stored and replace it with the correct value.

Regards,
Holger

Hi Shahin,

As Holger stated, please recover the https connector either by restoring the default certificate or better provide the correct password of the custom certificate in the *-defaultHttps-8091.properties file, under the @secure.keystorePass property.
Command Central WebUI is always redirected to open on https for security measures.

Thanks,
Serafim

1 Like