Cannot load keystore file with error Keystore was tampered with, or password was incorrect

Products

• CA Strong Authentication

Issue/Introduction

STRONG AUTHENTICATION: 9.1.01

TOMCAT: 9.0.8

SERVER: RHEL 7.4

 

keystore.truststore and keystore.keystore was updated on the following paths:

/home/tomcat/apache-tomcat-9.0.8/webapps/arcotafm/WEB-INF/classes/certs

/opt/CA/AdvAuth/adapterAFM/certs

/home/tomcat/apache-tomcat-9.0.8/conf

Error (logs attached).

2023-06-08 13:52:01,686 [main] INFO  integrations.frontend.InitializeTokenSvrClientServlet(250)  -> TokenServerTestConnAtStartup/ArcotSMTestConnAtStartup=true
2023-06-08 13:52:01,689 [main] INFO  toksvr.client.SimpleTSClientImpl(91)  -> SimpleTSClientImpl starting up...
2023-06-08 13:52:01,690 [main] INFO  toksvr.client.SimpleTSClientImpl(119)  -> Setting up the keystores for secure connections
2023-06-08 13:52:01,690 [main] INFO  toksvr.client.SimpleTSClientImpl(645)  -> Using configured Truststore file: /certs/keystore.truststore
2023-06-08 13:52:01,690 [main] INFO  toksvr.client.SimpleTSClientImpl(656)  -> Using configured Keystore file: /home/tomcat/apache-tomcat-9.0.8/conf/keystore.keystore
2023-06-08 13:52:01,690 [main] INFO  toksvr.client.SimpleTSClientImpl(657)  -> KeyStore configured, can do two-way SSL
2023-06-08 13:52:01,690 [main] INFO  toksvr.client.SimpleTSClientImpl(699)  -> Loaded truststore from classpath: /certs/keystore.truststore
2023-06-08 13:52:01,694 [main] FATAL toksvr.client.SimpleTSClientImpl(739)  -> Error during keystore initializations:
java.io.IOException: Keystore was tampered with, or password was incorrect

 

When test the password with keytool, the password is correct.

Environment

Release : 9.1

Cause

Some special chars may have special meaning in java properties file, it may cause the server failed to pickup the correct password from the configure file if those char(s) is used in the password.

Resolution

Try to only use letters and numbers for the password of the keystore file