Post updating certificates, OCI failed with error “Site can’t be reached”

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 200

Visibility:: Public

Votes:: 0

Category:: oncommand-insight

Specialty:: oci

Last Updated:

Applies to

OnCommand Insight (OCI) 7.3.X

Issue

Post updating ca signed certificates, unable to connect to OCI with error Site can’t be reached
The deployments where in undeployed state and logs was not getting updated.The error seen in wildfly.log is as follows:

2021-11-08 09:44:41,381 ERROR [MSC service thread 1-4] fail (ServiceControllerImpl.java:1746) - MSC000001: Failed to start service jboss.security.security-domain.onaro-login: org.jboss.msc.service.StartException in service jboss.security.security-domain.onaro-login: WFLYSEC0012: Unable to start the SecurityDomainService service

at org.jboss.as.security.service.SecurityDomainService.start(SecurityDomainService.java:106)

at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1738)

at org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1700)

at org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1558)

at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)

at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)

at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)

at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)

at java.lang.Thread.run(Thread.java:748)

Caused by: java.security.UnrecoverableKeyException: Cannot recover key

at sun.security.provider.KeyProtector.recover(KeyProtector.java:315)

at sun.security.provider.JavaKeyStore.engineGetKey(JavaKeyStore.java:141)

at sun.security.provider.JavaKeyStore$JKS.engineGetKey(JavaKeyStore.java:56)

at sun.security.provider.KeyStoreDelegator.engineGetKey(KeyStoreDelegator.java:96)

at sun.security.provider.JavaKeyStore$DualFormatJKS.engineGetKey(JavaKeyStore.java:70)

at java.security.KeyStore.getKey(KeyStore.java:1023)

at sun.security.ssl.SunX509KeyManagerImpl.(SunX509KeyManagerImpl.java:133)

at sun.security.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:70)

at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:256)

at org.jboss.security.JBossJSSESecurityDomain.loadKeyAndTrustStore(JBossJSSESecurityDomain.java:488)

at org.jboss.security.JBossJSSESecurityDomain.reloadKeyAndTrustStore(JBossJSSESecurityDomain.java:335)

at org.jboss.as.security.service.SecurityDomainService.start(SecurityDomainService.java:104)