 |
 |
Emyr, I notice that some of the error messages mention Sun. Are you sure you have the right JDK? Can you also check that the hostcert is where the msg refers and that you have permissions on the private key. John -----Original Message----- From: Testbed Support for GridPP member institutes [mailto:[log in to unmask]] On Behalf Of Stephen Jones Sent: 15 October 2012 13:43 To: [log in to unmask] Subject: Re: Apel issues On 10/15/2012 10:32 AM, emyr.james wrote: > On 11/10/12 15:52, Govind Songara wrote: >> I think keytool is not added to path, try running this script (for >> emi-apel) >> /usr/share/glite-apel-publisher/scripts/key_trust_store_maker.sh >> and then try publishing it again manually. > I ran the keytool, > > It goes for a while then bombs out.... > > . > . > Certificate was added to keystore > Certificate was added to keystore > unable to load private key > keytool error: java.lang.Exception: Source keystore file exists, but > is empty: /tmp/tmp.AFSMD18337 > mv: cannot stat `/etc/grid-security/hostcert.ks.18336': No such file > or directory > > Regardless I tried to manually run the publisher and looked at > apel.log and it says this.... > > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - Building account > records via GK Logs > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - NB: Record Counts may > be zero if Patch #898 is active on this CE > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - Stitching together all > accounting records > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - Stitching completed > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - No accounting data to > store > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - Generating 0 records > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - Number of Joined > accounting records: 0 > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - Build complete > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - program aborted > Mon Oct 15 09:15:19 UTC 2012: apel-publisher - javax.jms.JMSException: > Could not connect to broker URL: ssl://apel-broker.esc.rl.ac.uk:61617. > Reason: java.net.SocketException: > java.security.NoSuchAlgorithmException: Error constructing > implementation (algorithm: Default, provider: SunJSSE, class: > sun.security.ssl.DefaultSSLContextImpl) > > I had a look at > https://twiki.cern.ch/twiki/bin/view/EMI/APELFAQ#Q_java_lang_SecurityException_in > and made sure I had JAVA_HOME set to the OpenJDK distribution : > > [root@grid-apel yum.repos.d]# echo $JAVA_HOME > /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre > > Anyone got any idea on how to sort this out? > > Regards, > > Emyr That NoSuchAlgorithmException error could be related to the KEYSTORE_PASSWORD setting (https://twiki.cern.ch/twiki/pub/EMI/APELClient/Publisher_System_Administrator_Guide_v1.0.0.pdf). Steve -- Steve Jones [log in to unmask] System Administrator office: 220 High Energy Physics Division tel (int): 42334 Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334 University of Liverpool http://www.liv.ac.uk/physics/hep/ -- Scanned by iCritical.