Failed to generate Gitblit CA certificate when starting up Gitblit server

[Sajith Kariyawasam]

Hi all, 

When starting up Gitblit server I'm getting following exception, any idea? 

------------------------------------------------------------------------------------------------------------------

INFO  Running on Linux (3.2.0-36-virtual)

INFO  Setting up NIO SelectChannelConnector on port 8290

INFO  Using JCE Unlimited Strength Jurisdiction Policy files

INFO  Generating Gitblit Certificate Authority (/opt/GitBlit/data/certs/caKeyStore.p12)

Exception in thread "main" java.lang.RuntimeException: Failed to generate Gitblit CA certificate!

at com.gitblit.utils.X509Utils.newCertificateAuthority(X509Utils.java:656)

at com.gitblit.utils.X509Utils.prepareX509Infrastructure(X509Utils.java:260)

at com.gitblit.GitBlitServer.start(GitBlitServer.java:239)

at com.gitblit.GitBlitServer.main(GitBlitServer.java:120)

at com.gitblit.Launcher.main(Launcher.java:103)

Caused by: java.lang.ExceptionInInitializerError

at org.bouncycastle.operator.jcajce.JcaContentSignerBuilder.<init>(Unknown Source)

at com.gitblit.utils.X509Utils.newCertificateAuthority(X509Utils.java:610)

... 4 more

Caused by: java.lang.SecurityException: class "org.bouncycastle.asn1.ASN1ObjectIdentifier"'s signer information does not match signer information of other classes in the same package

at java.lang.ClassLoader.checkCerts(ClassLoader.java:806)

at java.lang.ClassLoader.preDefineClass(ClassLoader.java:487)

at java.lang.ClassLoader.defineClassCond(ClassLoader.java:625)

at java.lang.ClassLoader.defineClass(ClassLoader.java:615)

at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)

at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)

at java.net.URLClassLoader.access$000(URLClassLoader.java:58)

at java.net.URLClassLoader$1.run(URLClassLoader.java:197)

at java.security.AccessController.doPrivileged(Native Method)

at java.net.URLClassLoader.findClass(URLClassLoader.java:190)

at java.lang.ClassLoader.loadClass(ClassLoader.java:306)

at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)

at java.lang.ClassLoader.loadClass(ClassLoader.java:247)

at org.bouncycastle.operator.jcajce.OperatorHelper.<clinit>(Unknown Source)

... 6 more

Thanks

Sajith

[James Moger]

Hi Sajith,

It looks like the BouncyCastle jars are signed with different certificates.  I haven't noticed this before.  How are you running Gitblit?  Special environment?  This situation is more common with WebStart applications than with standard command-line Java apps.

-J

Sajith

--
You received this message because you are subscribed to the Google Groups "gitblit" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gitblit+u...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.