| *** Rudy6 (~Rudy6@213.132.115.194) has joined #wikid | 10:54 | |
| *** Rudy6 has quit (Remote host closed the connection) | 13:10 | |
| *** Rudy6 (~Rudy6@213.132.115.194) has joined #wikid | 13:11 | |
| *** nowen (~nowen@99-174-92-191.lightspeed.tukrga.sbcglobal.net) has joined #wikid | 13:34 | |
| *** TylerCash (~TylerCash@142.177.239.187) has joined #wikid | 13:40 | |
| TylerCash | Hello, I am having an issue utilizing the example.jsp page. I have tried everything reagrding the forums and I am now trying here. | 13:42 |
|---|---|---|
| nowen | sorry for the issue | 13:42 |
| nowen | are you getting the wClient not connecting issue | 13:42 |
| TylerCash | Yes indeed I am. | 13:43 |
| nowen | And what version of WiKID is this? | 13:43 |
| TylerCash | wikid-server-enterprise-3.5.0-b1472Would you like to see the adjusted code I have adjusted the following code (Where XXXXXXXX) is either our servercode or passphrase. | 13:43 |
| TylerCash | Correction: wikid-server-enterprise-3.5.0-b1472 | 13:44 |
| nowen | did you create an intermediate CA and localhost cert? | 13:44 |
| TylerCash | I did. When I run the following: | 13:44 |
| TylerCash | keytool -list -v -keystore /opt/WiKID/private/intCAKeys.p12 -storetype pkcs12 -storepass XXXXXX | 13:44 |
| TylerCash | keytool -list -v -keystore /opt/WiKID/private/localhost.p12 -storetype pkcs12 -storepass XXXXXX | 13:44 |
| TylerCash | They come back OK | 13:44 |
| nowen | and you restarted wikid after editing the jsp? | 13:45 |
| TylerCash | Correct. | 13:45 |
| TylerCash | The only thing I noticed is. | 13:45 |
| TylerCash | I have an ! in the middle of one of the passphrases. | 13:45 |
| TylerCash | When I run: keytool -list -v -keystore /opt/WiKID/private/localhost.p12 -storetype pkcs12 -storepass XXXX!XXXX it fails. | 13:46 |
| TylerCash | I have to use keytool -list -v -keystore /opt/WiKID/private/localhost.p12 -storetype pkcs12 -storepass 'XXXX!XXXX' | 13:46 |
| nowen | yeah | 13:46 |
| TylerCash | Do I also need to reflect that in the jsp? | 13:46 |
| nowen | that's should be fine. the jsp has it in quotes, right? | 13:46 |
| TylerCash | Correct, here is the code: | 13:46 |
| TylerCash | <% | 13:47 |
| TylerCash | String defaultservercode = "XXXXXXXXXXXX"; | 13:47 |
| TylerCash | String status = ""; | 13:47 |
| TylerCash | String chall; | 13:47 |
| TylerCash | wClient wc; | 13:47 |
| TylerCash | if (session.getServletContext().getAttribute("wClient") == null) { | 13:47 |
| TylerCash | wc = new wClient("127.0.0.1", 8388, Config.getValue("BASEPATH")+"private/localhost.p12", "XXXXXXXXXXX", Config.getValue("BASEPATH")+"private/CACertStore", "changeit" ) ; | 13:47 |
| TylerCash | session.getServletContext().setAttribute("wClient", wc); | 13:47 |
| TylerCash | } else { | 13:47 |
| TylerCash | wc = (wClient) session.getServletContext().getAttribute("wClient"); | 13:47 |
| TylerCash | } | 13:47 |
| TylerCash | if (wc.isConnected()) { | 13:47 |
| TylerCash | %> | 13:47 |
| TylerCash | I have restarted WiKID a after every change. The wAuth Configuration states that it is running. | 13:48 |
| nowen | anything in the WiKIDAdmin logs? | 13:48 |
| TylerCash | Yes indeed. | 13:49 |
| TylerCash | 2014-04-14 10:09:05.644ERRORcom.wikidsystems.client.wClientERROR: java.net.SocketException: Broken pipe | 13:49 |
| TylerCash | 2014-04-14 10:09:05.636ERRORcom.wikidsystems.server.wAuthCouldn't validate the client certificate. Verify the validity and dates of the client cert. | 13:49 |
| nowen | is the date correct on your box? | 13:49 |
| TylerCash | Yes. | 13:49 |
| TylerCash | [root@XXXXXXX WiKIDAdmin]# date | 13:49 |
| TylerCash | Mon Apr 14 10:49:32 ADT 2014 | 13:49 |
| nowen | does the date on the error match your restart? | 13:50 |
| TylerCash | That is the proper date/time where the box resides. | 13:50 |
| nowen | hmm | 13:50 |
| TylerCash | Hmmmm. | 13:50 |
| nowen | what version of java? | 13:50 |
| TylerCash | Ok, let me verify that for you. | 13:50 |
| TylerCash | WiKIDAdmin]# java -version | 13:51 |
| TylerCash | java version "1.6.0_22" | 13:51 |
| TylerCash | OpenJDK Runtime Environment (IcedTea6 1.10.10) (rhel-1.28.1.10.10.el5_8-i386) | 13:51 |
| TylerCash | OpenJDK Server VM (build 20.0-b11, mixed mode) | 13:51 |
| TylerCash | I am performing the restart now. | 13:52 |
| TylerCash | Yes indeed those same errors show up after wikidctl restart is performed. | 13:54 |
| TylerCash | 2014-04-14 10:53:27.580ERRORcom.wikidsystems.client.wClientERROR: java.net.SocketException: Broken pipe | 13:54 |
| TylerCash | 2014-04-14 10:53:27.572ERRORcom.wikidsystems.server.wAuthCouldn't validate the client certificate. Verify the validity and dates of the client cert. | 13:54 |
| TylerCash | with the appropriate date/time stamp. | 13:54 |
| nowen | ok - stop the server | 13:56 |
| TylerCash | Ok done. | 13:57 |
| nowen | run 'rm -Rf /opt/WiKID/tomcat/work' | 13:57 |
| nowen | and start the server again | 13:57 |
| TylerCash | Ok, command run and started the server. | 13:59 |
| TylerCash | It is still showing those errors in the logs. | 14:00 |
| TylerCash | 2014-04-14 10:58:52.760ERRORcom.wikidsystems.client.wClientERROR: java.net.SocketException: Broken pipe | 14:00 |
| TylerCash | 2014-04-14 10:58:52.741ERRORcom.wikidsystems.server.wAuthCouldn't validate the client certificate. Verify the validity and dates of the client cert. | 14:00 |
| nowen | hmm, try ctrl-shift-r to reload the page | 14:00 |
| TylerCash | Ok performed that and it still shows errors in the log. Nothing new though. | 14:01 |
| TylerCash | Ok, I refreshed the example.jsp page, then checked the logs and the same errors are appearing. | 14:02 |
| nowen | is it possible there's an extra line in your wc = new wClient line? | 14:03 |
| TylerCash | Entirely possible. I had it working in a previous version, then the upgrade overwrote the file. I modified the values and get the error. Where can I find the source of the original example.jsp file? | 14:05 |
| *** Rudy6 has quit (Remote host closed the connection) | 14:06 | |
| nowen | I can give you a link to the latest rpm and you can update. If you use -force it should overwrite the file. does that work? | 14:06 |
| TylerCash | Yes that works. Thank You. | 14:06 |
| nowen | http://wikidsystems-dl.com/wikid-server-enterprise-3.5.0.b1545-1.noarch.rpm | 14:06 |
| nowen | brb - got to get some coffee | 14:07 |
| TylerCash | Thank you very much. I will compare the files etc and go from there. | 14:07 |
| TylerCash | Ok, I upgraded the server to wikid-server-enterprise-3.5.0-b1545, changed the defaultservercode and passphrase within example.jsp, performed wikidctl restart and I still get the following errors: | 14:37 |
| TylerCash | example.jsp: The wClient connection to the server was NOT successfully established | 14:37 |
| nowen | huh | 14:37 |
| TylerCash | Upon Reboot: 2014-04-14 11:34:57.169ERRORcom.wikidsystems.client.wClientERROR: java.net.SocketException: Broken pipe | 14:37 |
| TylerCash | 2014-04-14 11:34:57.158ERRORcom.wikidsystems.server.wAuthCouldn't validate the client certificate. Verify the validity and dates of the client cert. | 14:37 |
| TylerCash | Upon refreshing the example.jsp page: 2014-04-14 11:35:13.037ERRORcom.wikidsystems.client.wClientERROR: java.net.SocketException: Broken pipe | 14:38 |
| TylerCash | 2014-04-14 11:35:13.027ERRORcom.wikidsystems.server.wAuthCouldn't validate the client certificate. Verify the validity and dates of the client cert. | 14:38 |
| nowen | so odd. It is working for me, same java, with a ! in the passphrase | 14:41 |
| TylerCash | Figures... | 14:42 |
| nowen | did you update java from 6 to 7 at some point? | 14:42 |
| nowen | let's create new certs - intCA and localhost and try again | 14:43 |
| TylerCash | No. The history of this server is: download vm, install it, upgrade WiKID via RPM on 11-24-2013 and 04-14-2014. | 14:43 |
| nowen | hhmm | 14:45 |
| nowen | will you run: keytool -printcert -v -file WiKIDCA.cer | 14:45 |
| TylerCash | private]# keytool -printcert -v -file WiKIDCA.cer | 14:46 |
| TylerCash | -bash: keytool -printcert: command not found | 14:46 |
| nowen | huh - didn't it work before? | 14:46 |
| TylerCash | wow. | 14:47 |
| TylerCash | yes it did. | 14:47 |
| TylerCash | now it is not found? | 14:47 |
| TylerCash | This worked. | 14:47 |
| TylerCash | private]# keytool -list -v -keystore /opt/WiKID/private/intCAKeys.p12 -storetype pkcs12 -storepass Pzvu8m4@4bonnet5! | 14:47 |
| TylerCash | Keystore type: PKCS12 | 14:47 |
| TylerCash | Keystore provider: BC | 14:47 |
| TylerCash | Your keystore contains 1 entry | 14:47 |
| TylerCash | Alias name: | 14:47 |
| TylerCash | Creation date: Apr 14, 2014 | 14:47 |
| TylerCash | Entry type: PrivateKeyEntry | 14:47 |
| TylerCash | Certificate chain length: 1 | 14:47 |
| TylerCash | Certificate[1]: | 14:47 |
| TylerCash | ETC ETC | 14:47 |
| TylerCash | Ok I ran it and it worked. | 14:50 |
| nowen | just want to make sure it's not expired | 14:50 |
| TylerCash | Do you want me to paste it in here or were you looking for something? | 14:50 |
| TylerCash | Valid from: Wed Apr 17 08:43:38 ADT 2013 until: Mon Apr 17 08:43:38 ADT 2023 | 14:50 |
| nowen | the expiration date should be 2023 | 14:50 |
| nowen | ok | 14:50 |
| nowen | I have no idea what's going on | 14:50 |
| nowen | I assume that SE linux is permissive | 14:51 |
| TylerCash | Tonight after hours I am going to revert to the 11-24-2013 snapshot and see what happens. | 14:52 |
| nowen | is this running in production? | 14:52 |
| TylerCash | Yes. | 14:52 |
| nowen | so, it was working before, then you upgraded, and now it's not? | 14:52 |
| TylerCash | It was working before upgrade on 11-24-2013. | 14:53 |
| nowen | what's the expiration date on your localhost cert? | 14:53 |
| TylerCash | One second | 14:53 |
| TylerCash | Bingo you found it. | 14:53 |
| TylerCash | Valid from: Thu Feb 14 18:57:08 AST 2013 until: Fri Feb 14 18:57:08 AST 2014 | 14:54 |
| nowen | lol | 14:54 |
| TylerCash | I could swear I checked that | 14:54 |
| nowen | ok - all you have to do is create a new localhost cert | 14:54 |
| TylerCash | Is there a URL for step by step on that? | 14:54 |
| nowen | http://www.wikidsystems.com/support/wikid-support-center/manual/how-to-install-the-wikid-strong-authentication-server/how-to-install-the-wikid-strong-authentication-server-enterprise-edition-page-2 | 14:55 |
| nowen | search for | 14:55 |
| nowen | Step 4: Generate a Localhost Certificate | 14:55 |
| TylerCash | Thank you. | 14:55 |
| TylerCash | You rock. Thanks again. | 14:55 |
| nowen | but it's pretty basic - click Configuration/Create localhost cert | 14:55 |
| nowen | then restart | 14:55 |
| TylerCash | It works. Thanks again. | 14:59 |
| nowen | nice! | 14:59 |
| *** coolacid has quit (Remote host closed the connection) | 18:32 | |
| *** coolacid (~CoolAcid@unaffiliated/coolacid) has joined #wikid | 18:45 | |
| *** TylerCash has quit () | 21:20 | |
| *** nowen has quit (Quit: Leaving.) | 22:41 | |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!