PM Data Aggregator can't start after trusting certificate
Article ID: 433354
Updated On:
Products
Network Observability
CA Performance Management
Issue/Introduction
While using DX NetOps Data Aggregator 25.4.5 - 25.4.6 where the DA is not setup for HTTPS, you may run into an issue where after using sslConfig.sh, option (3) to trust a public certificate, the 'dadaemon' service refuses to start with error:
/opt/IMDataAggregator/netops-data-aggregator.log:
Error starting ApplicationContext. To display the condition evaluation report re-run your application with 'debug' enabled.
2026-03-16T15:49:10,123 | ERROR | main | SpringApplication | framework.boot.SpringApplication 857 | - - | | Application run failed
org.springframework.context.ApplicationContextException: Unable to start web server
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.onRefresh(ServletWebServerApplicationContext.java:170) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:621) ~[spring-context-6.2.15.jar!/:6.2.15]
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:146) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:752) [spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:439) [spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.SpringApplication.run(SpringApplication.java:318) [spring-boot-3.5.9.jar!/:3.5.9]
at com.ca.im.dm.aggregator.DataAggregator.main(DataAggregator.java:29) [classes!/:?]
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
at java.base/java.lang.reflect.Method.invoke(Unknown Source) ~[?:?]
at org.springframework.boot.loader.MainMethodRunner.run(MainMethodRunner.java:49) [data-aggregator.main.jar:?]
at org.springframework.boot.loader.Launcher.launch(Launcher.java:95) [data-aggregator.main.jar:?]
at org.springframework.boot.loader.Launcher.launch(Launcher.java:58) [data-aggregator.main.jar:?]
at org.springframework.boot.loader.JarLauncher.main(JarLauncher.java:65) [data-aggregator.main.jar:?]
at org.springframework.boot.loader.launch.JarLauncher.main(JarLauncher.java:31) [data-aggregator.main.jar:?]
Caused by: java.lang.IllegalStateException: Unable to create trust store: Could not load store from '/opt/IMDataAggregator/DA/config/ssl/truststore'
at org.springframework.boot.ssl.jks.JksSslStoreBundle.createKeyStore(JksSslStoreBundle.java:112) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.lambda$new$1(JksSslStoreBundle.java:76) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.util.function.SingletonSupplier.get(SingletonSupplier.java:106) ~[spring-core-6.2.15.jar!/:6.2.15]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.getTrustStore(JksSslStoreBundle.java:91) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.createTrustStore(WebServerSslBundle.java:167) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.createStoreBundle(WebServerSslBundle.java:148) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.get(WebServerSslBundle.java:142) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.getSslBundle(AbstractConfigurableWebServerFactory.java:198) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.customizeSsl(TomcatServletWebServerFactory.java:384) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.customizeConnector(TomcatServletWebServerFactory.java:360) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.getWebServer(TomcatServletWebServerFactory.java:209) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.createWebServer(ServletWebServerApplicationContext.java:193) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.onRefresh(ServletWebServerApplicationContext.java:167) ~[spring-boot-3.5.9.jar!/:3.5.9]
... 15 more
Caused by: java.lang.IllegalStateException: Could not load store from '/opt/IMDataAggregator/DA/config/ssl/truststore'
at org.springframework.boot.ssl.jks.JksSslStoreBundle.loadKeyStore(JksSslStoreBundle.java:140) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.createKeyStore(JksSslStoreBundle.java:107) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.lambda$new$1(JksSslStoreBundle.java:76) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.util.function.SingletonSupplier.get(SingletonSupplier.java:106) ~[spring-core-6.2.15.jar!/:6.2.15]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.getTrustStore(JksSslStoreBundle.java:91) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.createTrustStore(WebServerSslBundle.java:167) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.createStoreBundle(WebServerSslBundle.java:148) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.get(WebServerSslBundle.java:142) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.getSslBundle(AbstractConfigurableWebServerFactory.java:198) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.customizeSsl(TomcatServletWebServerFactory.java:384) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.customizeConnector(TomcatServletWebServerFactory.java:360) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.getWebServer(TomcatServletWebServerFactory.java:209) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.createWebServer(ServletWebServerApplicationContext.java:193) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.onRefresh(ServletWebServerApplicationContext.java:167) ~[spring-boot-3.5.9.jar!/:3.5.9]
... 15 more
Caused by: java.io.IOException: keystore password was incorrect
at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(Unknown Source) ~[?:?]
at java.base/sun.security.util.KeyStoreDelegator.engineLoad(Unknown Source) ~[?:?]
at java.base/java.security.KeyStore.load(Unknown Source) ~[?:?]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.loadKeyStore(JksSslStoreBundle.java:136) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.createKeyStore(JksSslStoreBundle.java:107) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.lambda$new$1(JksSslStoreBundle.java:76) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.util.function.SingletonSupplier.get(SingletonSupplier.java:106) ~[spring-core-6.2.15.jar!/:6.2.15]
at org.springframework.boot.ssl.jks.JksSslStoreBundle.getTrustStore(JksSslStoreBundle.java:91) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.createTrustStore(WebServerSslBundle.java:167) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.createStoreBundle(WebServerSslBundle.java:148) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.WebServerSslBundle.get(WebServerSslBundle.java:142) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.getSslBundle(AbstractConfigurableWebServerFactory.java:198) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.customizeSsl(TomcatServletWebServerFactory.java:384) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.customizeConnector(TomcatServletWebServerFactory.java:360) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory.getWebServer(TomcatServletWebServerFactory.java:209) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.createWebServer(ServletWebServerApplicationContext.java:193) ~[spring-boot-3.5.9.jar!/:3.5.9]
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.onRefresh(ServletWebServerApplicationContext.java:167) ~[spring-boot-3.5.9.jar!/:3.5.9]
... 15 more
Environment
DX NetOps 25.4.5 - 25.4.6
Performance Managment
Data Aggregator
Cause
A bug was introduced during Spring Boot changes to the 'dadaemon' service.
Resolution
To get dadaemon started again:
1. Edit /opt/IMDataAggregator/DA/config/application.properties
2. Edit the very bottom of the file to look like:
app.configureSSL=N
#app.SSL_TRUSTSTORE_PASSWORD=QUVTOnKKEFcxZhb5GkewIWi42JU=
#server.ssl.trust-store=/opt/IMDataAggregator/DA/config/ssl/truststore
#server.ssl.trust-store-password=${trustStorePassword}
#server.ssl.trust-store-type=PKCS12
3. systemctl start dadaemon
To trust a public certificate without introducing this issue, please use java keytool to do the import:
1. /opt/IMDataAggregator/jre/bin/keytool -trustcacerts -importcert -keystore /opt/IMDataAggregator/jre/lib/security/cacerts -storepass changeit -alias <certalias> -file /tmp/<certname>.pem
2. systemctl restart dadaemon
Feedback
Yes
No
Powered by
