My Oracle Support Banner

OVD 11g Suddenly Fails To Start. Diagnostic.log Shows Message: "Cannot start Oracle Virtual Directory server: Keystore was tampered with, or password was incorrect." (Doc ID 1166157.1)

Last updated on JUNE 25, 2018

Applies to:

Oracle Virtual Directory - Version 11.1.1.1.0 and later
Information in this document applies to any platform.

Symptoms

An instance of Oracle Virtual Directory (OVD) 11g was running ok before.  Suddenly OVD Server startup fails.

Ensure that components were started in the correct order: OVD and Enterprise Management (EM) Agent using  opmnctl startall command; then Weblogic Admin Server using startWeblogic.sh command; lastly  Weblogic Managed Server using startManagedWeblogic.sh command.  All components start up except for OVD.

OVD diagnostic.log shows:

]]
[2010-07-28T15:59:58.642-04:00] [octetstring] [ERROR] [OVD-60182] [com.octetstring.vde.util.PasswordEncryptor] [tid: 10] [ecid: <ECID string>] [arg: Given final block not properly padded] Exception: Given final block not properly padded.[[
javax.crypto.BadPaddingException: Given final block not properly padded
at com.sun.crypto.provider.SunJCE_f.b(DashoA13*..)
at com.sun.crypto.provider.SunJCE_f.b(DashoA13*..)
at com.sun.crypto.provider.AESCipher.engineDoFinal(DashoA13*..)
at javax.crypto.Cipher.doFinal(DashoA13*..)
at com.octetstring.vde.util.PasswordEncryptor.dAES(PasswordEncryptor.java:286)
at com.octetstring.vde.util.PasswordEncryptor.d(PasswordEncryptor.java:253)
at com.octetstring.vde.config.listeners.ListenerCfg.getTrustStorePassword(ListenerCfg.java:270)
at com.octetstring.vde.frontend.OVDListeningEndpoint.<init>(OVDListeningEndpoint.java:151)
at com.octetstring.vde.frontend.ListenerHandler.init(ListenerHandler.java:91)
at com.octetstring.vde.VDEServer.startServer(VDEServer.java:173)
at com.octetstring.vde.VDEServer.main(VDEServer.java:334)

]]
[2010-07-28T15:59:58.653-04:00] [octetstring] [ERROR] [OVD-60216] [com.octetstring.vde.VDEServer] [tid: 10] [ecid: <ECID string>] [arg: Keystore was tampered with, or password was incorrect] Cannot start Oracle Virtual Directory server: Keystore was tampered with, or password was incorrect.[[
java.io.IOException: Keystore was tampered with, or password was incorrect
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771)
at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38)
at java.security.KeyStore.load(KeyStore.java:1185)
at com.octetstring.vde.util.OVDSSLSocketFactory.getKeyStore(OVDSSLSocketFactory.java:282)
at com.octetstring.vde.frontend.SocketListener.getKeyStore(SocketListener.java:264)
at com.octetstring.vde.frontend.SocketListener.getSSLContext(SocketListener.java:111)
at com.octetstring.vde.frontend.SocketListener.init(SocketListener.java:87)
at com.octetstring.vde.admin.AdminService.init(AdminService.java:66)
at com.octetstring.vde.frontend.ListenerHandler.addListener(ListenerHandler.java:99)
at com.octetstring.vde.frontend.ListenerHandler.init(ListenerHandler.java:91)
at com.octetstring.vde.VDEServer.startServer(VDEServer.java:173)
at com.octetstring.vde.VDEServer.main(VDEServer.java:334)
Caused by: java.security.UnrecoverableKeyException: Password verification failed
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:769)
... 11 more

]]
[2010-07-28T15:59:58.653-04:00] [octetstring] [NOTIFICATION] [OVD-20052] [com.octetstring.vde.VDEServer] [tid: 10] [ecid: <ECID string>] Oracle Virtual Directory Server is shutting down.
[2010-07-28T15:59:59.496-04:00] [octetstring] [NOTIFICATION] [OVD-20010] [com.octetstring.vde.backend.standard.Local Store Adapter.BackendStandard] [tid: 11] [ecid: <ECID string>] [arg: [#Local Store Adapter].]  [#Local Store Adapter]  Initializing Memory Indices
[2010-07-28T15:59:59.510-04:00] [octetstring] [NOTIFICATION] [OVD-20075] [com.octetstring.vde.VDEServer] [tid: 10] [ecid: <ECID string>] Oracle Virtual Directory Server is stopped.


However, have not changed any passwords and when using the keytool command line utility to access the keystore files, everything works fine.

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.