Fisheye/Crucible fails to start with SSL - Cannot recover key
Symptoms
Fisheye/Crucible couldn't start up with the following error in the atlassian-fisheye-<date>.log:
2013-09-04 12:29:39,792 ERROR - Could not start server: !JsseListener: java.security.UnrecoverableKeyException: Cannot recover key
java.io.IOException: !JsseListener: java.security.UnrecoverableKeyException: Cannot recover key
at org.mortbay.jetty.security.SslSocketConnector.newServerSocket(SslSocketConnector.java:516)
at org.mortbay.jetty.bio.SocketConnector.open(SocketConnector.java:73)
at org.mortbay.jetty.AbstractConnector.doStart(AbstractConnector.java:283)
at org.mortbay.jetty.bio.SocketConnector.doStart(SocketConnector.java:147)
at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at org.mortbay.jetty.Server.doStart(Server.java:235)
at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
at com.cenqua.fisheye.web.WebServer.start(WebServer.java:292)
at com.cenqua.fisheye.ctl.Run.mainImpl(Run.java:249)
at com.cenqua.fisheye.ctl.Run.main(Run.java:78)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.cenqua.fisheye.FishEyeCtl.mainImpl(FishEyeCtl.java:99)
at com.cenqua.fisheye.FishEyeCtl.main(FishEyeCtl.java:42)Cause
The certificate key has a password that is different than keystore password. Normally the key password isn't set and it defaults to the keystore password.
Resolution
Set the key password to be the same as keystore password, e.g.:
$ keytool -keypasswd -keystore fecru.keystore.kst -alias fisheye
Enter keystore password: keystorepass
Enter key password for <fisheye>: certkeypass
New key password for <fisheye>: keystorepass
Re-enter new key password for <fisheye>: keystorepass
Last modified on Jul 31, 2018
Powered by Confluence and Scroll Viewport.