Security Core

[Justin Michalczak]

I've been having trouble with the Security Core project. Can anyone here 
provide help on that? I realize that this is not the list for that 
project, but its list and forums are empty.

Particularly, I am having trouble even running the Secure Ping example. 
Running the provided NodeA.bat file results in:

Exception in thread "main" java.lang.Error: Failed to launch 
org.cougaar.core.node.Node
         at 
org.cougaar.bootstrap.Bootstrapper.launchMain(Bootstrapper.java:446)
         at 
org.cougaar.bootstrap.Bootstrapper.launchApplication(Bootstrapper.java:378)
         at org.cougaar.bootstrap.Bootstrapper.launch(Bootstrapper.java:348)
         at org.cougaar.bootstrap.Bootstrapper.launch(Bootstrapper.java:333)
         at org.cougaar.bootstrap.Bootstrapper.main(Bootstrapper.java:321)
Caused by: java.lang.ClassNotFoundException: Class cannot be Trusted
         at 
org.cougaar.core.security.securebootstrap.SecureClassLoader.findClass(SecureClassLoader.java:108)
         at 
org.cougaar.core.security.securebootstrap.BaseClassLoader.loadClass(BaseClassLoader.java:147)
         at java.lang.ClassLoader.loadClass(Unknown Source)
         at 
org.cougaar.bootstrap.Bootstrapper.launchMain(Bootstrapper.java:422)
         ... 4 more
Caused by: 
org.cougaar.core.security.securebootstrap.CertificateVerificationException: 
Archive Z:\Cougaar\TESTBED\lib\core.jar cannot be trusted
         at 
org.cougaar.core.security.securebootstrap.CertificateVerifierImpl.verify(CertificateVerifierImpl.java:298)
         at 
org.cougaar.core.security.securebootstrap.SecureClassLoader.findClass(SecureClassLoader.java:99)
         ... 7 more
Caused by: java.io.FileNotFoundException: 
\cygdrive\c\UL\cougaar-security-test2\configs\security\bootstrap_keystore 
(The system cannot find the path specified)
         at java.io.FileInputStream.open(Native Method)
         at java.io.FileInputStream.<init>(Unknown Source)
         at java.io.FileInputStream.<init>(Unknown Source)
         at 
org.cougaar.core.security.securebootstrap.CertificateVerifierImpl.inKeyStore(CertificateVerifierImpl.java:374)
         at 
org.cougaar.core.security.securebootstrap.CertificateVerifierImpl.verify(CertificateVerifierImpl.java:295)
         ... 8 more


At first, I thought it was a problem with signing core.jar. But, I 
verified that it was signed, and reading further down the chain to the 
last exception, the system is trying to access a Cygwin path, which is 
interesting since this is the .bat file that I'm running. Also, even if 
I were running in Cygwin, that path does not exist on my system, and I 
have no idea what it means. (It looks to me like a hard-coded path used 
during testing that was never removed/replaced.)

Any advice appreciated,
~Justin