EJBCA Finalize Installation Adminweb not available at https://localhost:8443/ejbca/adminweb/

[JannikZorn]

Hello,

my current setup is:
ubuntu 20.04
wildfly 22.0.0
openjdk 11.0.18
javadoc 11.0.18

I followed the instructions of the official website for the installation (https://doc.primekey.com/ejbca/ejbca-installation) but got stucked at the "Finalize Installation" part.
I passed the "Deploying" part with SUCCESS and without errors in the server.log.

I also passed the "Installation" part with SUCCESS output.

wildfly service is up and running

But now I'm stuck at the "Finalize" part. I can't open the admin UI at https://localhost:8443/ejbca/adminweb/.
I tried with the IP Adress of the server and also checked the open ports but port 8443 seems not to be open.
I checked the server.log again and saw the admin web is listening to a different port. But still same. I can't access the admin UI.
I get the Error ERR_CONNECTION_REFUSED.

Do you have any idea how to fix it?
Thanks & best regards

[primetomas]

Did you import superadmin.p12 into your web browser?

[primetomas]

to check that the application is up, you can go to https://localhost:8442/ejbca (only TLS server authentication)

Also see wildfly standalone/log/server.log for possible errors during startup.

[JannikZorn]

Not yet. I don't know how to.
I used the docker image before. There I was able to open a website and download and import the superadmin.p12 from the website.

[primetomas]

After running "ant install" superadmin.p12 is generated in the p12 subdirectory.

[JannikZorn]

I imported the superadmin.p12 now and also tried to access https://localhost:8442/ejbca but still ERR_CONNECTION_REFUSED.
There were no errors during the deploy/installation process in server.log.
Also in the server.log it shows Admin console listening on http://127.0.0.1:9990/ but also this port doesn't work

[JannikZorn]

[primetomas]

This errors you past above are not actually errors, and are completely fine btw.

[JannikZorn]

I did a reinstalltion now with wildfly 26. now the error is different ERR_SSL_PROTOCOL_ERROR

[JannikZorn]

I imported the superadmin.p12 already

[JannikZorn]

On http://localhost:8080/ejbca/ I see now the EJBCA page, So I guess there is something wrong with the superadmin.p12 cert

[JannikZorn]

I tried a completly new installation but I'm still unable to acess adminweb. COuld anyone help me out? I tried the IP adress with port 8443 as well

[srasay2]

What browser are you using and are you connecting in an incognito session? Firefox is the recommended browser for ease of importing your keys and setting them up to gain access to the Admin Web application. R

On Thu, Apr 27, 2023 at 01:26 JannikZorn ***@***.***> wrote: I tried a completly new installation but I'm still unable to acess adminweb. COuld anyone help me out? I tried the IP adress with port 8443 as well — Reply to this email directly, view it on GitHub <#270 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABFMQGNCNGQ77QSFAUDIH3XDIURXANCNFSM6AAAAAAW6NYZEE> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Rich Asay

[JannikZorn]

What browser are you using and are you connecting in an incognito session?
I tried with Firefox 112.0.2 (64-Bit) and in an incognito session.
I imported the superadmin.p12
but still SSL Handshake ERROR

I found the following discussion and tried to follow the troubleshooting steps:
#46

but converting the keystore und truststore to .p12 and restarting wildfly only caused ERR_CONNECTION_REFUSED

[JannikZorn]

I solved it now it was the same issue as discussed in #46
The standalone.xml still tries to use kestore.p12 and truststore.p12 but can't find those files because the files called keystore.jks and truststore.jks. I used wildfly-26.0.0 and the documentation wasn't updated yet.
Solution was the following:

cd /opt/wildfly/standalone/configuration/keystore
keytool -importkeystore -srckeystore keystore.jks -srcstoretype JKS -deststoretype PKCS12 -destkeystore keystore.p12
keytool -importkeystore -srckeystore truststore.jks -srcstoretype JKS -deststoretype PKCS12 -destkeystore truststore.p12

systemctl restart wildfly

Thanks for your help anyway!