Home.... | log in.... | Pub my question! | Sign-up....
Java-index >> Web & Directory Servers >> Web Servers

viewing a certificate: keyhas null value

I'm running WS 7.0 B12/04/2006 10:15 on sparc Solaris 9 and encounter a problem when viewing a installed certificate.

The steps before:

1. migrating an existing WS 6.1 SP4 installation on the same server (including the certificates), whereas all four instances were successfully migrated and are operational and can be started.

Three of the instances are running with https.

For one of the instances the certificate has expired and I renewed the certificate as follows:

* choose the instance

* install

* Token: internal and setting a password

* enter Certificate [DER Format] with copy & paste

* choose Nickname: btv-https-cert und Listener: ls1

* Finish

Then it showed: "Some of the tokens require passwords to list certificates".

So I've chosen 'Set password' - entered a password. This was accepted.

Two entry were shown now in the 'Server certificates Tab', and one of the entries were expired:

* BTV (this is new certificate)

* Server-Cert < which has been expired

Now I deleted the expired 'Server-Cert'.

* Selected certificate: Server-Cert

and associate a new listener ls1 for it.

I got

"Certificate deleted successfully".

But here in the 'Server certificates Tab' are still existing both certificates, and if I choose 'Server-Cert' or 'BTV', it ends in the GUI with

An error has occurred.

keyhasnull value:

The admin-server/logs/errors log shows

[12/Jun/2007:14:53:29] failure (17045):for host 10.101.12.146 trying to POST /admingui/admingui/configServerCertificates, service-j2ee reports: ApplicationDispatcher[/admingui] PWC1231: Servlet.service()for servlet jsp threw exception

com.sun.enterprise.tools.guiframework.exception.FrameworkError: com.sun.enterprise.tools.guiframework.exception.FrameworkException: java.lang.reflect.InvocationTargetExceptionwhile attempting to process a'endDisplay' eventfor'certDetailsTable'.

at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.endChildDisplay(DescriptorViewHelper.java:541)

at com.sun.enterprise.tools.guiframework.view.DescriptorCCPropertySheet.endChildDisplay(DescriptorCCPropertySheet.java:158)

at com.sun.web.ui.taglib.common.CCTagBase.fireEndDisplayEvent(CCTagBase.java:208)

and

[12/Jun/2007:14:53:29] info (17045):for host 10.101.12.146 trying to POST /admingui/admingui/configServerCertificates, service-j2ee reports: com.sun.enterprise.tools.guiframework.exception.FrameworkException:com.sun.web.admin.gui.util.Util.getRequiredValue(Util.java:916)

com.sun.web.admin.gui.handlers.CommonHandlers.getMapElement(CommonHandlers.java:1938)

sun.reflect.GeneratedMethodAccessor100.invoke(Unknown Source)

sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

java.lang.reflect.Method.invoke(Method.java:585)

and

[12/Jun/2007:14:53:29] info (17045):for host 10.101.12.146 trying to POST /admingui/admingui/configServerCertificates, service-j2ee reports: com.iplanet.jato.NavigationException: Exception encountered during forward

Root cause = [com.sun.enterprise.tools.guiframework.exception.FrameworkError: com.sun.enterprise.tools.guiframework.exception.FrameworkException: java.lang.reflect.InvocationTargetExceptionwhile attempting to process a'endDisplay' eventfor'certDetailsTable'.]

[12/Jun/2007:14:53:29] info (17045):for host 10.101.12.146 trying to POST /admingui/admingui/configServerCertificates, service-j2ee reports: keyhasnull value:

Something wrong with my procedure?

Has it been a mistake to delete the Server-Cert?

-- Nick

[4248 byte] By [der_nikia] at [2007-11-27 7:10:41]
«« xml security - Digital Signature - sign digest value pre calculated
»» A link (underline) for #include statements without pressing ctrl
# 1

Hi Nick,

I tried the following steps via 7.0 Administration GUI (B12/04/2006 10:15) and I could n't reproduce the problem.

1. Migrated succesfully 6.1sp4 instances(one non SSL and and one SSL enabled) to 7.0. SSL instance had an expired certificate.

2. Deployed both the migrated configurations to the admin-server node.

3. Installed a new certificate for the ssl enabled instance using the Install Certificate wizard.

4. Set the token password to view the certificates installed. I could see expired certificate and newly installed certificate in the table

5. Deleted the expired certificate. The certificate got successfully deleted from the table.

6. Clicked on the newly created certificate. I could see the certificate properties without any error.

If you have done anything different than what is being mentioned in the above steps, then let me know.

amit-suna at 2007-7-12 19:02:13 > top of Java-index,Web & Directory Servers,Web Servers...
# 2
Hi Nick,There is nothing wrong with your procedure. You can always delete the expired certificate. If you observe this happening again, kindly post the use case to the forum.Thanks,Amit
amit-suna at 2007-7-12 19:02:13 > top of Java-index,Web & Directory Servers,Web Servers...
# 3
hm interesting - thank you for testing it.I'll begin from scratch and try to reproduce my steps. Later I'll tell you my results asap.-- Nick
der_nikia at 2007-7-12 19:02:13 > top of Java-index,Web & Directory Servers,Web Servers...
# 4

well it's somehow impossible to reproduce the problem, but I remember one more fact.

At the moment I migrated one https instance, the embedded certificate had been expired.

The migration itself ran problem-free.

The next step was a renewal of the certificate:

- Server-Cerificates

- Install - Token:internal

- Certificate [DER Format]

- and here in Nickname: <name>

I provided an already existing name, which resulted in

ErrorAn error has occurred

com.sun.web.admin.exceptions.AdminException: ADMIN4109: A Certificate with the nickname 'btv-https-cert' already exists

Then I deleted the old 'Server-Cert'.

And since this message I got also the ever-returning message

An error has occurred.

keyhas null value:

when choosing to view the renewed certificate.

But now I spent hours to reproduce it - and I give up now, I can't convince the webserver to show me the same message again.

I also must admit that the refaced admin GUI 7.0 is a big deal!

It has never been so easy to configure all the necessary stuff!

-- Nick

der_nikia at 2007-7-12 19:02:13 > top of Java-index,Web & Directory Servers,Web Servers...
# 5
Thanks for taking the time to reproduce the issue. I too tried to reproduce the issue again, but was not successful. In future, if you get to see this happen again, kindly post the use case in the forum.Thanks,Amit
amit-suna at 2007-7-12 19:02:13 > top of Java-index,Web & Directory Servers,Web Servers...
Web & Directory Servers
Web Servers

Web & Directory Servers Hot Topic

Web & Directory Servers

All Classified