Command create-domain --savemasterpassword=true failed

[renatsaf]

GlassFish Version (and build number)

7.1.0 2333b45

JDK version

Timurin jdk-21.0.8+9

OS

Linux Ubuntu 22.04.5 LTS

Database

No response

Problem Description

When command "create-domain --savemasterpassword=true" is used error "CLI130: Could not create domain" occurs.

There is command log:
asadmin> create-domain --savemasterpassword=true

Enter the value for the domain_name operand> ServiceMIS
Enter admin user name [Enter to accept default "admin" / no password]>admin
Enter the admin password [Enter to accept default of no password]>
Enter the admin password again>
Enter the master password [Enter to accept default password "changeit"]>
Enter the master password again>
Default port 4848 for Admin is in use. Using 40971
Default port 8080 for HTTP Instance is in use. Using 42629
Default port 7676 for JMS is in use. Using 45721
Default port 3700 for IIOP is in use. Using 35747
Default port 8181 for HTTP_SSL is in use. Using 35181
Using default port 3820 for IIOP_SSL.
Using default port 3920 for IIOP_MUTUALAUTH.
Default port 8686 for JMX_ADMIN is in use. Using 35205
Using default port 6666 for OSGI_SHELL.
Using default port 9009 for JAVA_DEBUGGER.
Distinguished Name of the self-signed X.509 Server Certificate is:
[CN=172.17.0.1,OU=GlassFish,O=Eclipse Foundation]
Executing command: /usr/java/jdk-21.0.8+9/bin/keytool -J-Duser.language=en -noprompt -genkeypair -alias s1as -dname CN=172.17.0.1,OU=GlassFish,O=Eclipse Foundation -keyalg RSA -validity 3650 -keystore /opt/glassfish-7.1.0/glassfish/domains/ServiceMIS/config/keystore.p12 -storetype PKCS12
Executing command: /usr/java/jdk-21.0.8+9/bin/keytool -J-Duser.language=en -noprompt -genkeypair -alias glassfish-instance -dname CN=172.17.0.1-instance,OU=GlassFish,O=Eclipse Foundation -keyalg RSA -validity 3650 -keystore /opt/glassfish-7.1.0/glassfish/domains/ServiceMIS/config/keystore.p12 -storetype PKCS12
File does not exist or it does not refer to a normal file: /opt/glassfish-7.1.0/glassfish/domains/ServiceMIS/config/cacerts.p12( java.lang.IllegalArgumentException: File does not exist or it does not refer to a normal file: /opt/glassfish-7.1.0/glassfish/domains/ServiceMIS/config/cacerts.p12 )
CLI130: Could not create domain, ServiceMIS
Command create-domain failed.

Steps to reproduce

1. Change path to glassfishdir/bin
2. Execute asadmin
3. Enter "create-domain --savemasterpassword=true" command
4. Enter the master password different than the default changeit

Impact of Issue

It's critical because I could not create any domain.

[pzygielo]

Cannot reproduce:

Version = Eclipse GlassFish 7.1.0 (commit: 2333b45243ef722b235649526fc99200be8c653d)

Use "exit" to exit and "help" for online help.
asadmin> create-domain --savemasterpassword=true
Enter the value for the domain_name operand> ServiceMIS
Enter admin user name [Enter to accept default "admin" / no password]>admin
Enter the admin password [Enter to accept default of no password]> 
Enter the admin password again> 
Enter the master password [Enter to accept default password "changeit"]> 
Enter the master password again> 
Using default port 4848 for Admin.
Using default port 8080 for HTTP Instance.
Using default port 7676 for JMS.
Using default port 3700 for IIOP.
Using default port 8181 for HTTP_SSL.
Using default port 3820 for IIOP_SSL.
Using default port 3920 for IIOP_MUTUALAUTH.
Using default port 8686 for JMX_ADMIN.
Using default port 6666 for OSGI_SHELL.
Using default port 9009 for JAVA_DEBUGGER.
Distinguished Name of the self-signed X.509 Server Certificate is:
[CN=XXX,OU=GlassFish,O=Eclipse Foundation]
Executing command: /usr/xxx/temurin-jdk-21.0.9+10/bin/keytool -J-Duser.language=en -noprompt -genkeypair -alias s1as -dname CN=XXX,OU=GlassFish,O=Eclipse Foundation -keyalg RSA -validity 3650 -keystore /tmp/glassfish7/glassfish/domains/ServiceMIS/config/keystore.p12 -storetype PKCS12
Executing command: /usr/xxx/temurin-jdk-21.0.9+10/bin/keytool -J-Duser.language=en -noprompt -genkeypair -alias glassfish-instance -dname CN=XXX-instance,OU=GlassFish,O=Eclipse Foundation -keyalg RSA -validity 3650 -keystore /tmp/glassfish7/glassfish/domains/ServiceMIS/config/keystore.p12 -storetype PKCS12
Domain ServiceMIS created.
Domain ServiceMIS admin port is 4848.
Domain ServiceMIS admin user is "admin".
Command create-domain executed successfully.
asadmin> 

Command multimode executed successfully.

Share results of

$ ls -ld /opt/glassfish-7.1.0/glassfish/domains/ServiceMIS
$ ls -l /opt/glassfish-7.1.0/glassfish/domains/ServiceMIS/config
$ file /opt/glassfish-7.1.0/glassfish/domains/ServiceMIS/config/cacerts.p12

[renatsaf]

@pzygielo Thank you for reply.

I could reproduce error with a different masterpassword (other than "changeit").
With standart masterpassword "changeit" it doesn't reproduce.

[pzygielo]

I could reproduce error with a different masterpassword (other than "changeit").
With standart masterpassword "changeit" it doesn't reproduce.

I confirm - I'm seeing the same failure now (with non-changeit master password).

---

Updated initial description, and so will hide some outdated comments.