4 Replies Latest reply on Apr 7, 2014 7:55 PM by maxandersen

    Jboss DevStudio 7.1.1.GA install failure - certificate error

    shreepads

      1. Downloaded jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar

       

      2. Ran java -jar jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar stuck to the defaults and clicked thru

       

      3. Install failed with an error re certificates not being trusted

       

      4. Log message in ~/jbdevstudio/studio/p2/director/configuration/1396752621141.log  as follows:

       

      !ENTRY org.eclipse.equinox.p2.engine 8 0 2014-04-06 08:21:42.061

      !MESSAGE One or more certificates rejected. Cannot proceed with installation.

       

      System details:

      Debian Jessie 64 bit

       

      $ uname -a:

      Linux Name 3.13-1-amd64 #1 SMP Debian 3.13.7-1 (2014-03-25) x86_64 GNU/Linux

       

      $ java -version

      java version "1.7.0_51"

      OpenJDK Runtime Environment (IcedTea 2.4.5) (7u51-2.4.5-2)

      OpenJDK 64-Bit Server VM (build 24.51-b03, mixed mode)

       

      Any suggestions?

       

      Thanks!

        • 1. Re: Jboss DevStudio 7.1.1.GA install failure - certificate error
          shreepads

          Update:

           

          /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts is linked to /etc/ssl/certs/java/cacerts

           

          Running

           

          $keytool -list -v -keystore /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts > openjdkcacerts.txt

           

          gives the linked...

           

          http://pastebin.com/tc794cvP

           

          So it seems java has access to all the necessary root CAs...

          • 2. Re: Jboss DevStudio 7.1.1.GA install failure - certificate error
            shreepads

            Update 2:

             

            Tried jbdevstudio-product-universal-6.0.1.GA-v20130327-2052-B361.jar with the same result.

             

            Install fails on the last step with:

             

            "

            One or more certificates rejected. Cannot proceed with installation.

            Application failed, log file location: /home/user/oldjbdevstudio/studio/p2/director/configuration/1396768486738.log

            "

             

            The corresponding full log entry:

             

            "

            !SESSION 2014-04-06 12:44:46.503 -----------------------------------------------

            eclipse.buildId=unknown

            java.version=1.7.0_51

            java.vendor=Oracle Corporation

            BootLoader constants: OS=linux, ARCH=x86_64, WS=gtk, NL=en_IN

            Framework arguments:  -roaming -r jar:file:///home/sysadmin/Downloads/jbdevstudio-product-universal-6.0.1.GA-v20130327-2052-B361.jar!/ -d /home/sysadmin/oldjbdevstudio/studio -p jbds -i com.jboss.jbds.all,org.testng.eclipse.feature.group -profileProperties org.eclipse.update.install.features=true

            Command-line arguments:  -roaming -r jar:file:///home/sysadmin/Downloads/jbdevstudio-product-universal-6.0.1.GA-v20130327-2052-B361.jar!/ -d /home/sysadmin/oldjbdevstudio/studio -p jbds -i com.jboss.jbds.all,org.testng.eclipse.feature.group -profileProperties org.eclipse.update.install.features=true

             

            !ENTRY org.eclipse.equinox.p2.engine 8 0 2014-04-06 12:45:40.261

            !MESSAGE One or more certificates rejected. Cannot proceed with installation.

            "

            • 3. Re: Jboss DevStudio 7.1.1.GA install failure - certificate error
              shreepads

              Solved...

               

              The org.eclipse.equinox.p2.engine JAR contained in the jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar has a ECLIPSE_.RSA certificate that is signed by the root CA "GTE CyberTrust Solutions" but that root CA is not present in the openjdk cacerts (via openssl as described above):

               

              "

              $openssl pkcs7 -in ECLIPSE_.RSA -print_certs -inform DER

              subject=/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust Global Root

              issuer=/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust Global Root

              -----BEGIN CERTIFICATE-----

              "

              But

               

              $keytool -list -v -keystore /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts | grep GTE

               

              produces no results

               

              But I have the GTE root CA cert available in /usr/share/ca-certificates/mozilla/ so the steps to take are

               

              a. Go to /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/

               

              b. #mv cacerts oldcacertsold

               

              c. #cp /etc/ssl/certs/java/cacerts .

               

              d. #keytool -keystore /usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts -importcert -alias GTECyberTrustGlobalRoot -file /usr/share/ca-certificates/mozilla/GTE_CyberTrust_Global_Root.crt

               

               

              Now running java -jar jbdevstudio-product-eap-universal-7.1.1.GA-v20140314-2145-B688.jar works without errors...

               

               

              Now I just need to figure out how to use the bloody thing... It's as complex as a space shuttle control panel!

              • 4. Re: Jboss DevStudio 7.1.1.GA install failure - certificate error
                maxandersen

                sorry for your troubles. you should not be seeing these kind of errors!

                 

                Impressed you figured out why it failed

                 

                I've opened [JBDS-3002] certificate errors in installer - JBoss Issue Tracker to track this - please add yourself as watcher.