Could not load trustStore from file

Products

• CA Release Automation - Release Operations Center (Nolio)
• CA Release Automation - DataManagement Server (Nolio)

Issue/Introduction

On NAC, in logs/nolio_dm_all.log file following error appears :

2023-05-19T10:50:44.635+03:00 [ActionsSyncTimer] ERROR (com.nolio.platform.shared.communication.services.TrustStoreUtils:78) - Could not load trustStore from file
java.io.IOException: Keystore was tampered with, or password was incorrect
    at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:785)
    at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
    at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
    at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)

And NES appears as not Reachable in UI :

Environment

Release Automation - All versions.

Cause

The file <RA_HOME>/conf/security-customization.properties does not contain the parameter javax.net.ssl.trustStorePassword or it is set with an invalid encrypted password

See step 19 of section "Secure Management Server to Execution Server Communication" in this page :

https://techdocs.broadcom.com/us/en/ca-enterprise-software/intelligent-automation/release-automation-nolio/6-7/installation/ca-release-automation-security/secure-communications.html

Create or edit the file that is named security-customization.properties at RA_HOME\conf and populate the file with the following lines (password can be plain text or encrypted):
javax.net.ssl.trustStore=conf/custom-truststore.jks
javax.net.ssl.trustStorePassword=<password for custom-truststore.jks>

Resolution

ON NAC, edit file <RA_HOME>/conf/security-customization.properties and add the line javax.net.ssl.trustStorePassword or correct its value.

 

Encrypted password could be found with this command :

 

cd <RA_HOME>

scripts/encrypt_password.sh pwd_truststore

 

Replace pwd_truststore with the password for truststore file.