1:21 a.m.
1. Downloaded jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar
2. Ran java -jar jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar stuck
to the defaults and clicked thru
3. Install failed with an error re certificates not being trusted
4. Log message in ~/jbdevstudio/studio/p2/director/configuration/1396752621141.log as
follows:
!ENTRY org.eclipse.equinox.p2.engine 8 0 2014-04-06 08:21:42.061
!MESSAGE One or more certificates rejected. Cannot proceed with installation.
System details:
Debian Jessie 64 bit
$ uname -a:
Linux Name 3.13-1-amd64 #1 SMP Debian 3.13.7-1 (2014-03-25) x86_64 GNU/Linux
$ java -version
java version "1.7.0_51"
OpenJDK Runtime Environment (IcedTea 2.4.5) (7u51-2.4.5-2)
OpenJDK 64-Bit Server VM (build 24.51-b03, mixed mode)
Any suggestions?
Thanks!
Posted by forums
Original post: https://community.jboss.org/message/866868#866868
2:50 a.m.
Update:
/usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts is linked to
/etc/ssl/certs/java/cacerts
Running
$keytool -list -v -keystore /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts
> openjdkcacerts.txt
gives the linked...
http://pastebin.com/tc794cvP
So it seems java has access to all the necessary root CAs...
Posted by forums
Original post: https://community.jboss.org/message/866870#866870
5:20 a.m.
Update 2:
Tried jbdevstudio-product-universal-6.0.1.GA-v20130327-2052-B361.jar with the same
result.
Install fails on the last step with:
"
One or more certificates rejected. Cannot proceed with installation.
Application failed, log file location:
/home/user/oldjbdevstudio/studio/p2/director/configuration/1396768486738.log
"
The corresponding full log entry:
"
!SESSION 2014-04-06 12:44:46.503 -----------------------------------------------
eclipse.buildId=unknown
java.version=1.7.0_51
java.vendor=Oracle Corporation
BootLoader constants: OS=linux, ARCH=x86_64, WS=gtk, NL=en_IN
Framework arguments: -roaming -r
jar:file:///home/sysadmin/Downloads/jbdevstudio-product-universal-6.0.1.GA-v20130327-2052-B361.jar!/
-d /home/sysadmin/oldjbdevstudio/studio -p jbds -i
com.jboss.jbds.all,org.testng.eclipse.feature.group -profileProperties
org.eclipse.update.install.features=true
Command-line arguments: -roaming -r
jar:file:///home/sysadmin/Downloads/jbdevstudio-product-universal-6.0.1.GA-v20130327-2052-B361.jar!/
-d /home/sysadmin/oldjbdevstudio/studio -p jbds -i
com.jboss.jbds.all,org.testng.eclipse.feature.group -profileProperties
org.eclipse.update.install.features=true
!ENTRY org.eclipse.equinox.p2.engine 8 0 2014-04-06 12:45:40.261
!MESSAGE One or more certificates rejected. Cannot proceed with installation.
"
Posted by forums
Original post: https://community.jboss.org/message/866879#866879
11:30 a.m.
Solved...
The org.eclipse.equinox.p2.engine JAR contained in the
jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar has a ECLIPSE_.RSA
certificate that is signed by the root CA "GTE CyberTrust Solutions" but that
root CA is not present in the openjdk cacerts (via openssl as described above):
"
$openssl pkcs7 -in ECLIPSE_.RSA -print_certs -inform DER
subject=/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust Global
Root
issuer=/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust Global
Root
-----BEGIN CERTIFICATE-----
"
But
$keytool -list -v -keystore /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts |
grep GTE
produces no results
But I have the GTE root CA cert available in /usr/share/ca-certificates/mozilla/ so the
steps to take are
a. Go to /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/
b. #mv cacerts oldcacertsold
c. #cp /etc/ssl/certs/java/cacerts .
d. #keytool -keystore /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts
-importcert -alias GTECyberTrustGlobalRoot -file
/usr/share/ca-certificates/mozilla/GTE_CyberTrust_Global_Root.crt
Now running java -jar jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar
works without errors...
Now I just need to figure out how to use the bloody thing... It's as complex as a
space shuttle control panel!
Posted by forums
Original post: https://community.jboss.org/message/866891#866891
9:55 p.m.
sorry for your troubles. you should not be seeing these kind of errors!
Impressed you figured out why it failed {emoticon:class=jive_macro
jive_emote|src=https://community.jboss.org/6.0.3.60ddddd/images/emoticons...
I've opened [JBDS-3002] certificate errors in installer - JBoss Issue Tracker
(https://issues.jboss.org/browse/JBDS-3002) to track this - please add yourself as
watcher.
Posted by forums
Original post: https://community.jboss.org/message/867140#867140
3681
days inactive
3683
days old
jbdevstudio-users@lists.jboss.org
4 comments
3 participants
participants (3)
-
Max Rydahl Andersen -
Shreepad Shukla
-
shreepads