Repair truststore

The guide describes the case when a truststore has been modified on the Master server. As a result, Business Processes stop working, and the Mesos service shows the following error:

java.lang.NoClassDefFoundError: Could not initialize class org.webharvest.runtime.web.HttpClientManager

The error from the WorkFusion's logs shows that the password for the keystore is incorrect:

java.security.KeyStoreException: failed to extract any certificates or private keys - maybe bad password?

To resolve the issue, follow the steps below:

1. Check all certificates that the truststore includes:

   keytool -list -keystore /opt/workfusion/java/jre/lib/security/cacerts

   The output should be similar to the following:

   *****************  WARNING WARNING WARNING  *****************
   * The integrity of the information stored in your keystore  *
   * has NOT been verified!  In order to verify its integrity, *
   * you must provide your keystore password.                  *
   *****************  WARNING WARNING WARNING  *****************
   ...
   internalca03_uat_b64, Mar 18, 2019, trustedCertEntry,
   internalca03uat, Mar 19, 2019, trustedCertEntry,
   internalca01_uat_b64, Mar 18, 2019, trustedCertEntry,
   userca1g2uat_b64, Mar 18, 2019, trustedCertEntry,
   rootcag2dev, Mar 19, 2019, trustedCertEntry,
   rootcag3dev, Mar 19, 2019, trustedCertEntry,
   rpa1, Jan 8, 2019, trustedCertEntry,
   bi1, Mar 4, 2019, trustedCertEntry,
   webspheremqicgwfrpa, Mar 19, 2019, PrivateKeyEntry,
   internalrootcauat, Mar 19, 2019, trustedCertEntry,
   deviceca1g3uat_b64, Mar 18, 2019, trustedCertEntry,
   ...

   As you see, the output includes a string of a wrong type:

   webspheremqicgwfrpa, Mar 19, 2019, PrivateKeyEntry,

2. Remove the following private key from the truststore:

   keytool -delete -alias 'webspheremqicgwfrpa' -keystore /opt/workfusion/java/jre/lib/security/cacerts

3. Restart all services on the Master server:

   wfmanager restart all