Hi All,

I want to renew my self signed certificates, so i am  using the below command to list the personal certificates using the below command, but i am getting the error as shown. 
Kindly suggest.

wsadmin>AdminTask.listPersonalCertificates('-interactive')
List Personal Certificates

The list of personal certificates in a given keyStore.

*Key Store Name (keyStoreName): NodeDefaultKeyStore
Key Store Scope Name (keyStoreScope):

List Personal Certificates

F (Finish)
C (Cancel)

Select [F, C]: [F] F
WASX7278I: Generated command line: AdminTask.listPersonalCertificates('[-keyStoreName NodeDefaultKeyStore ]')
com.ibm.websphere.management.exception.ConnectorException: ADMC0009E: The system failed to make the SOAP RPC call: invoke
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invokeTemplate(SOAPConnectorClient.java:762)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invoke(SOAPConnectorClient.java:582)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invoke(SOAPConnectorClient.java:409)
at $Proxy0.invoke(Unknown Source)
at com.ibm.ws.management.AdminClientImpl.invoke(AdminClientImpl.java:205)
at com.ibm.ws.management.cmdframework.impl.ClientTaskCommand.execute(ClientTaskCommand.java:126)
at com.ibm.ws.scripting.adminCommand.AdminCmdController.executeCmd(AdminCmdController.java:1365)
at com.ibm.ws.scripting.adminCommand.AdminCmdController.processCmd(AdminCmdController.java:220)
at com.ibm.ws.scripting.adminCommand.AdminCmdProxyHandler.invoke(AdminCmdProxyHandler.java:86)
at com.ibm.ws.scripting.adminCommand.AdminCmdProxyBase.__method3(AdminCmdProxyBase.java:53)
at com.ibm.ws.scripting.adminCommand.AdminTask.listPersonalCertificates(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:79)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.python.core.PyReflectedFunction.__call__(PyReflectedFunction.java)
at org.python.core.PyMethod.__call__(PyMethod.java)
at org.python.core.PyObject.__call__(PyObject.java)
at org.python.core.PyInstance.invoke(PyInstance.java)
at org.python.pycode._pyx4.f$0(:1)
at org.python.pycode._pyx4.call_function()
at org.python.core.PyTableCode.call(PyTableCode.java)
at org.python.core.PyCode.call(PyCode.java)
at org.python.core.Py.runCode(Py.java)
at org.python.core.Py.exec(Py.java)
at org.python.util.PythonInterpreter.exec(PythonInterpreter.java)
at com.ibm.bsf.engines.jython.JythonEngine$BSFPythonInterpreter.runcode(Unknown Source)
at org.python.util.InteractiveInterpreter.runsource(InteractiveInterpreter.java)
at org.python.util.InteractiveInterpreter.runsource(InteractiveInterpreter.java)
at com.ibm.bsf.engines.jython.JythonEngine.iexec(Unknown Source)
at com.ibm.bsf.BSFManager$7.run(Unknown Source)
at java.security.AccessController.doPrivileged(AccessController.java:246)
at com.ibm.bsf.BSFManager.iexec(Unknown Source)
at com.ibm.ws.scripting.AbstractShell.interactive(AbstractShell.java:1168)
at com.ibm.ws.scripting.AbstractShell.run(AbstractShell.java:1996)
at com.ibm.ws.scripting.WasxShell.main(WasxShell.java:1025)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:79)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:618)
at com.ibm.wsspi.bootstrap.WSLauncher.launchMain(WSLauncher.java:183)
at com.ibm.wsspi.bootstrap.WSLauncher.main(WSLauncher.java:90)
at com.ibm.wsspi.bootstrap.WSLauncher.run(WSLauncher.java:72)
at org.eclipse.core.internal.runtime.PlatformActivator$1.run(PlatformActivator.java:78)
at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.runApplication(EclipseAppLauncher.java:92)
at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.start(EclipseAppLauncher.java:68)
at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:400)
at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:177)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:79)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.eclipse.core.launcher.Main.invokeFramework(Main.java:340)
at org.eclipse.core.launcher.Main.basicRun(Main.java:282)
at org.eclipse.core.launcher.Main.run(Main.java:981)
at com.ibm.wsspi.bootstrap.WSPreLauncher.launchEclipse(WSPreLauncher.java:339)
at com.ibm.wsspi.bootstrap.WSPreLauncher.main(WSPreLauncher.java:94)
Caused by: [SOAPException: faultCode=SOAP-ENV:Client; msg=Read timed out; targetException=java.net.SocketTimeoutException: Read timed out]
at org.apache.soap.transport.http.SOAPHTTPConnection.send(SOAPHTTPConnection.java:453)
at org.apache.soap.rpc.Call.invoke(Call.java:328)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient$8.run(SOAPConnectorClient.java:720)
at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invokeTemplate(SOAPConnectorClient.java:713)
... 56 more
WASX7015E: Exception running command: "AdminTask.listPersonalCertificates('-interactive')"; exception information:
com.ibm.websphere.management.exception.ConnectorException
org.apache.soap.SOAPException: [SOAPException: faultCode=SOAP-ENV:Client; msg=Read timed out; targetException=java.net.SocketTimeoutException: Read timed out]

Hi Hari,

  You are getting "read time out" are you connecting to remote host? how much time are you waiting between launch the command "AdminTask.listPersonalCertificates('-interactive')" and type F(Finish)?
 
  review your in PROFILE_NAME\properties\soap.client.props
 
  the propertie com.ibm.SOAP.requestTimeout=180 increase the time.
 
  Hope this helps. Tell us if you need more support.
 
regards

Hi Gabriel,

Thanks for replying.

I tried changing  the  com.ibm.SOAP.requestTimeout=300 , but still its giving the same error.

I waited for 5 minutes approximately after executing the command.
 

 

Hari,

  if you put com.ibm.SOAP.requestTimeout=60 have you got the timeout in 60 seconds?
 
  Are you in standalone server or in DMGR?
 
  Can you review the owner of the trust.p12 and key.p12
 
   PROFILE_NAME\cells\CELL_NAME\nodes\NODE_NAME
   
regards

Hi Gabriel,


Thanks for your reply, please find the requested info.

Yes,  I  tried with  com.ibm.SOAP.requestTimeout=60  and i  got the timeout in 60 seconds.
  
  I m using DMGR.
  
  Can you review the owner of the trust.p12 and key.p12 
  
Owner of  trust.p12 and key.p12 is wasadm user.

Hari,

  Are you able to open trust.p12 and key.p12 with ikeyman?

  All your directories under WAS_HOME\ has the same owner, group and permisions?

regards

Hi Gabriel,

In server i can see lot of key.p12 and trust.p12 files in locations like:

usr/IBM/WebSphere/AppServer/profiles/AppSrv01/wstemp/anonymous1382519214154/workspace/cells/kjrm05Node01Cell/nodes/kjrm05Node01/key.p12

I launched IKeyman tool (usr/IBM/WebSphere/AppServer/bin/ikeyman.sh) and tried to open any of the above key.p12 files by going to above path.But i dont see any files in the above location.

Please correct me, if i am wrong.

All the files the WAS home are using the owned by same user wasadm.


 

./IBM/IBMHttpServer/HTTPServer/Plugins/bin/ikeyman.sh

Hari,

  I know that you are not able to access through adminconsole
 
    Key Management -> SSL configurations-> NodeDefaultSettings
    
  but are you able to access?
 
    SSL certificate and key management > Key stores and certificates
    
  You need to try open trust.p12 and key.p12 from
 
    DMGRC_PROFILE\config\cells\CELL_NAME
    
regards