PDF not show image

[Laurel]

Hi Dear Erman! Hope all is fine :)
After changing certificates java+ssl. All working fine. No problems.
All other reports PDF runnin fine with pictures.

But 1 report NOT displaying 2 logo in PDF.
tuned trace and got error
Caused by: java.security.KeyStoreException: IBMKeyManager: Problem accessing key store java.io.IOException: Keystore was tampered with, or password was incorrect
   
[080926_2301238][][ERROR] Failed to load the image:
 https://omapps.xx.xx:4458/OA_MEDIA/tlogo.jpg

Can you give me a hint what file could incorrect IF otherwise instance working file ?
and why other PDF reports pictures work fine ? this is what bothers me.. :)

In html format  it displays 1 logo without error but second again not displayed

In test env i cannot reproduce it ...
So any help appreciated ...

Thx alot!
br,Laurel

[Laurel]

Hi!
A bit more information.
I could reproduce now in  in test env

Where it worked :  we  had the old ../fs2/EBSapps/comn/util/jdk64/jre/lib/security/cacerts that i could NOT open with keytool now .( gave me keystore  tampered/password incorrect)

When i copied  the correct one that i can open with keytool  and password =>  the image xdo showing STOPPED  working.
So its a bit bizare situation.

So where XDO is taking password ? Any hint ?

Thx!
Br,Laurel

[ErmanArslansOracleBlog]

Hi Laurel, eveything is fine, I hope all good on your side as well..

Seems like XDO fetches https://... images, and JVM opens truststore (cacerts) → password baked into JVM args does not match new cacerts password.. Well, seems like that's the flow..

Easiest fix seems equalizing password of the cacerts with the password that JVM already expects (probably-> changeit)...

[Laurel]

Hi Erman!
Thx! this is i am thinking as well.
The instance and login ++ working fine otherwise.

Where is  XDO storing the password to access the cacerts ?

as i can open the new cacerts with keytool with new password and its works. Where it gets the old password from ?

Thx!
Br,Laurel

[Laurel]

Hi Erman!
I really stucked with this :(

i made password match
 declare
   spass varchar2(30);
   kpass varchar2(30);
   begin
  ad_jar.get_jripasswords(spass, kpass);
   dbms_output.put_line(spass);
   dbms_output.put_line(kpass);
  end;
xxx
xxx

With these passwords i can open with
keytool -list -keystore ./fs2/EBSapps/appl/admin/cacerts
and these files:
./fs2/EBSapps/appl/admin/cacerts
./fs2/EBSapps/comn/util/jdk32/jre/lib/security/cacerts
./fs2/EBSapps/comn/util/jdk64/jre/lib/security/cacerts
./fs_ne/EBSapps/appl/ad/admin/cacerts

and also i can open  adkeystore.dat
keytool -list -keystore ./fs2/EBSapps/appl/admin/adkeystore.dat
./fs2/EBSapps/appl/admin/adkeystore.dat
./fs2/EBSapps/comn/util/jdk32/jre/lib/security/adkeystore.dat
./fs2/EBSapps/comn/util/jdk64/jre/lib/security/adkeystore.dat
./fs_ne/EBSapps/appl/ad/admin/adkeystore.dat

same password for this one with alias
 keytool -keypasswd -alias xx -keystore adkeystore.dat

so where is this error coming from ?!! The login is working fine, signing ok. certs recognized

XDO is usig jdk64bit its written that uses jdk64bit home
in xdo debug still same messages:

[082326_2214807][][EXCEPTION] java.net.SocketException: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: IBMJSSE2, class: com.ibm.jsse2.gc)
..Caused by: java.security.KeyStoreException: IBMKeyManager: Problem accessing key store java.io.IOException: Keystore was tampered with, or password was incorrect


Any help would be appreciated :)
best wishes,Laurel