 |
 | Home | Contact Us | FAQ | Search & Site Map | Link to Us |
 | Sign In | Join | Other 45 Sites in Network |
Java Forum / Security / November 2003initial password of cacerts
Hi Can anyone tell me initial password of cacerts file shipped with Java Web Start 1.4.2? "changeit" is not the right one. In 1.4.1 it was, but in 1.4.2 it doesn't fit. >"changeit" is not the right one. In 1.4.1 it was, but in 1.4.2 it >doesn't fit. I can confirm your observation, but I don't know the new password either. If the normal changeit cacerts has all the certs you need, you could just substitute it, could you not? -- Canadian Mind Products, Roedy Green. Coaching, problem solving, economical contract programming. See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. >>"changeit" is not the right one. In 1.4.1 it was, but in 1.4.2 it >>doesn't fit. [quoted text clipped - 3 lines] > either. If the normal changeit cacerts has all the certs you need, > you could just substitute it, could you not? No I can't. I have no direct access to the file to substitute it. I need a password to write user's instruction on certificate installation. With 1.4.2_02 (build 1.4.2_02-b03), it works for me on W2k. - Michel Gallant http://pages.istar.ca/~neutron > >"changeit" is not the right one. In 1.4.1 it was, but in 1.4.2 it > >doesn't fit. [quoted text clipped - 7 lines] > Coaching, problem solving, economical contract programming. > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. >With 1.4.2_02 (build 1.4.2_02-b03), it works for me on W2k. are you sure you are getting the cacerts in c:\j2sdk1.4.2_02\jre\javaws? -- Canadian Mind Products, Roedy Green. Coaching, problem solving, economical contract programming. See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. Same for me: 1.4.2-b28 /W2k - Robert www.xlreader.com > With 1.4.2_02 (build 1.4.2_02-b03), it works for me on W2k. > - Michel Gallant [quoted text clipped - 11 lines] > > Coaching, problem solving, economical contract programming. > > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. >Same for me: 1.4.2-b28 /W2k What is going on? Try this command all on one line: c:\j2sdk1.4.2_02\bin\keytool -list -keystore c:\j2sdk1.4.2_02\jre\javaws\cacerts -storepass changeit I get: keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect -- Canadian Mind Products, Roedy Green. Coaching, problem solving, economical contract programming. See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. No problem here: C:\Documents and Settings\mgallant\Desktop>c:\j2sdk1.4.2_02\bin\keytool -list - eystore c:\j2sdk1.4.2_02\jre\javaws\cacerts -storepass changeit Keystore type: jks Keystore provider: SUN Your keystore contains 25 entries .... .... - Mitch Gallant > >Same for me: 1.4.2-b28 /W2k > [quoted text clipped - 13 lines] > Coaching, problem solving, economical contract programming. > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. Oops! I missed "Web Start" keytool -list -keystore jre\lib\security\cacerts - storepass changeit ==> OK (Your keystore contains 20 entries ...) keytool -list -keystore jre\javaws\cacerts - storepass changeit ==> WRONG (keytool error: IOException: Keystore was tamperered with ...) - Robert www.xlreader.com > >Same for me: 1.4.2-b28 /W2k > [quoted text clipped - 13 lines] > Coaching, problem solving, economical contract programming. > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. Also works with the other more common cacerts file (with jre\bin on your system path): keytool -list -keystore c:\j2sdk1.4.2_02\jre\lib\security\cacerts -storepass changeit - Michel Gallant MVP Security http://pages.istar.ca/~neutron > Oops! I missed "Web Start" > [quoted text clipped - 23 lines] > > Coaching, problem solving, economical contract programming. > > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. >keytool -list -keystore jre\javaws\cacerts - storepass changeit > ==> WRONG (keytool error: IOException: Keystore was tamperered with ...) me too. What gives? I have win2K with latest patches. 512 mb ram. That is not exactly what I typed. Are we each using a different keytool or getting a different cacerts? -- Canadian Mind Products, Roedy Green. Coaching, problem solving, economical contract programming. See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. Roedy, Do you have the same error message when \jre\lib\security\cacerts ?? I have ONLY one JRE installed (removed all others some time ago). Have not actually run or used any jws apps ... maybe a rogue app is changing the password?? - Mitch Gallant > >keytool -list -keystore jre\javaws\cacerts - storepass changeit > > ==> WRONG (keytool error: IOException: Keystore was tamperered with ...) [quoted text clipped - 8 lines] > Coaching, problem solving, economical contract programming. > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. >Do you have the same error message when \jre\lib\security\cacerts ?? no, it is fine. -- Canadian Mind Products, Roedy Green. Coaching, problem solving, economical contract programming. See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. aha! It must be something related to an app using JWS. I have not explicitly used JWS, and that cacerts file in the JWS subdir is fine for me ... just a guess, of course :-) - Mitch Gallant > >Do you have the same error message when \jre\lib\security\cacerts ?? > no, it is fine. [quoted text clipped - 3 lines] > Coaching, problem solving, economical contract programming. > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. >aha! It must be something related to an app using JWS. >I have not explicitly used JWS, and that cacerts file in the >JWS subdir is fine for me ... just a guess, of course :-) Another possible theory: JWS was once a separate download. I think I still have that around. Perhaps when the install checks for an old cacerts, and uses that in preference to the new one. -- Canadian Mind Products, Roedy Green. Coaching, problem solving, economical contract programming. See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. Could it be that WebStart's cacerts was not updated? I have the following cacerts with Java 1.4.2/Win2k: . javaws\cacerts: . 11 entries, . most recent entry: oct 31, 2000 . password: ? . lib\security\cacerts: . 20 entries, . most recent entry: jan 3, 2003 . password: "changeit" - Robert www.xlreader.com > >keytool -list -keystore jre\javaws\cacerts - storepass changeit > > ==> WRONG (keytool error: IOException: Keystore was tamperered with ...) [quoted text clipped - 8 lines] > Coaching, problem solving, economical contract programming. > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. Same for me: 1.4.2-b28 /W2k - Robert www.xlreader.com > With 1.4.2_02 (build 1.4.2_02-b03), it works for me on W2k. > - Michel Gallant [quoted text clipped - 11 lines] > > Coaching, problem solving, economical contract programming. > > See http://mindprod.com/jgloss/jgloss.html for The Java Glossary. Free MagazinesGet these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...
|
Reply to this Message
|
 Sign In
 Join
 My Latest Posts My Monitored Threads My Blog My Photo Gallery My Profile My Homepage Start New Thread Enable EMail Alerts Rate this Thread
|
©2008 Advenet LLC Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.