Oracle B2B Error: java.security.UnrecoverableKeyException: Cannot recover key

Following error occurred in our test B2B environment after accidentally changing keystore password from B2B console. Error is gone after re-entering correct keystore password.

2017-10-24T09:29:22.458-07:00] [soa_server2] [ERROR] [] [oracle.soa.b2b.engine] [tid: DaemonWorkThread: ’15’ of WorkManager: ‘wm/SOAWorkManager’] [userId: ] [ecid: 676f960c-bafc-428e-bfc3-ce699d0cd75d-00422c87,0] [APP: soa-infra] java.security.UnrecoverableKeyException: Cannot recover key[[
at sun.security.provider.KeyProtector.recover(KeyProtector.java:328)
at sun.security.provider.JavaKeyStore.engineGetKey(JavaKeyStore.java:138)
at sun.security.provider.JavaKeyStore$JKS.engineGetKey(JavaKeyStore.java:55)
at java.security.KeyStore.getKey(KeyStore.java:792)
at sun.security.ssl.SunX509KeyManagerImpl.(SunX509KeyManagerImpl.java:131)
at sun.security.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:68)
at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:259)
at oracle.tip.b2b.security.service.JksKeyStoreServiceImpl.getSSLContext(JksKeyStoreServiceImpl.java:804)
at oracle.tip.b2b.transport.basic.ftp.FtpSocketFactory.setupSSLSocketFactory(FtpSocketFactory.java:269)
at oracle.tip.b2b.transport.basic.ftp.FtpSocketFactory.(FtpSocketFactory.java:235)
at oracle.tip.b2b.transport.basic.ftp.FTP.connect(FTP.java:420)
at oracle.tip.b2b.transport.basic.ftp.FTPClient.establishFtpSession(FTPClient.java:170)
at oracle.tip.b2b.transport.basic.ftp.FTPAgent.login(FTPAgent.java:556)
at oracle.tip.b2b.transport.basic.ftp.FTPAgent.putFile(FTPAgent.java:455)
at oracle.tip.b2b.transport.basic.FileSource.putFile(FileSource.java:370)
at oracle.tip.b2b.transport.basic.FileSender.send(FileSender.java:136)
at oracle.tip.b2b.transport.b2b.B2BTransport.send(B2BTransport.java:323)
at oracle.tip.b2b.transport.TransportInterface.send(TransportInterface.java:1650)
at oracle.tip.b2b.msgproc.Request.outgoingRequestPostColab(Request.java:2061)
at oracle.tip.b2b.msgproc.Request.outgoingRequest(Request.java:1156)
at oracle.tip.b2b.engine.Engine.processOutgoingMessageImpl(Engine.java:1733)
at oracle.tip.b2b.engine.Engine.processOutgoingMessage(Engine.java:917)
at oracle.tip.b2b.engine.Engine.outgoingContinueProcess(Engine.java:4223)
at oracle.tip.b2b.engine.Engine.handleMessageEvent(Engine.java:4030)
at oracle.tip.b2b.engine.Engine.processEvents(Engine.java:3551)
at oracle.tip.b2b.engine.ThreadWorkExecutor.processEvent(ThreadWorkExecutor.java:785)
at oracle.tip.b2b.engine.ThreadWorkExecutor.run(ThreadWorkExecutor.java:234)
at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:184)
at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:184)
at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
java.security.UnrecoverableKeyException: Cannot recover key
at sun.security.provider.KeyProtector.recover(KeyProtector.java:328)

Comments

Post a Comment

Popular posts from this blog

SOA SUITE 12.2.1.4 INSTALLATION: GOT EXCEPTION WHEN AUTO CONFIGURING THE SCHEMA COMPONENT(S) WITH DATA OBTAINED FROM SHADOW TABLE

  We planned to do out of place upgrade from soa suite 12.2.1.3 to 12.2.1.4. As part of this, we planned to automate end to end provisioning. While executing domain configuration using ansible and python scripts, we got following error in domain creation step. Got exception when auto configuring the schema component(s) with data obtained from shadow table. Failed to build JDBC Connection object: com.oracle.cie.domain.script.jython.CommandExceptionHandler. exception. Quick internet search gave few solutions like deleting domain-registry.xml file, verifying dehydration store password supplied to script etc. But none of them helped. After trying several options, I thought I might have done some stupid error prior to domain creation step. To track down the issue, though of checking what getDatabaseDefaults actually doing. I tried to grep for the getDatabaseDefaults function call inside oracle home. But couldn’t find the source code for the python function. As a final resort, thought of...
Read more

HOW WE REDUCED SOA OSB PROVISIONING FROM 4 DAYS TO 4 HOURS

 In our organization, we’ve undertaken the task of upgrading both SOA and OSB from version 12.2.1.3 to 12.2.1.4. This involves an out-of-place migration approach, wherein we create a new environment and switch traffic during the cutover. As you know, this process typically requires several days we opt for manual provisioing. A very significant amount of automation work was previously accomplished for 12.2.1.3 by our predecessors. Despite these efforts, the process still used to take lot of time due to following factors: Bugs in existing automation. For example, SOA composite deployments is not stable which warrants lot of manual work Import of 10s of TLS Certificates into KSS Manual retiring and shutting down of services Monitoring setup Miscellaneous: Increasing Log file count, enabling GC logging, changing heap parameters, bash profile changes While our current automation initiatives have yielded substantial savings, we aimed to capitalize on this upgrade activity to enable end-t...
Read more

RABBITMQ CONNECTION ERROR: JAVAX.NET.SSL.SSLHANDSHAKEEXCEPTION: INVALID ECDH SERVERKEYEXCHANGE SIGNATURE

We have a 7 node test rabbitmq cluster. One of the rabbitmq users reported that they were getting “ javax.net.ssl.SSLHandshakeException: Invalid ECDH ServerKeyExchange signature ” error while connecting to Rabbitmq. We checked logs and also checked application up time. Rabbitmq servers hadn’t been restarted for the past 25 days. Also, we didn’t observe any errors in logs related to vhost used by client. We also checked if the certificate is expired and it was not. We got reasonably confident that it was not our issue and asked to check from client side. As day progressed, we got complaints from two other client application teams. One of them uses php and other uses java. At this point, we started suspecting rabbitmq. Also, one team with multiple consumers told us that they are facing issue only with few of the consumers. With this information, we felt that issue could be with few of the nodes and not complete cluster. One of the blogs on the internet suggested that this error could occ...
Read more