Saving PKCS12 resulted in Error in the log file
Hi there,
I am gettng error when saving .pfx file (PKCS12) format. Below is the error log ... NOTE: I have made sure the JDK has the US unlimited policy installed.
2016-02-02 18:54:42,904 [ttp-bio-8080-exec-14] [TABTHREAD3] [ ] [ abc:01.01.01] (Admin_Security_Keystore.Action) ERROR localhost| Proprietary information hidden Admin@sco1 - Unable to generate alias listjava.io.IOException: exception unwrapping private key - java.security.InvalidKeyException: Illegal key size
You could also try this out with the selfsign jks and convert it to P12 format to try this out e.g.
keytool -importkeystore -srckeystore keystore_sc1.jks -destkeystore sericharoesri.p12 -srcstoretype JKS -deststoretype PKCS12 -deststorepass password -srcalias selfsigned -destalias selfsigned
Please try to create a keystore rule with the attached p12. The password is "password"
Enviroment: Pega 7.1.9 and 7.1.7
Please advice.
Regards
Seri
Accepted Solution
Pegasystems Inc.
AU
Hi Habeeb,
I did check that the JRE has the US Unlimit Policy jar file, the server has no JDK.
Pegasystems Inc.
GB
What version of Java are you using here ? I wonder if the 'illegal keysize' is due to some restriction to ensure keys are secure.
For instance: is this file coming into play ? :
<JAVA_HOME>\jre\lib\security\java.security
And maybe this setting:
jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024
I haven't checked your particular keystore file yet.
Pegasystems Inc.
GB
Can you elaborate exactly the steps you are following which result in this error ?
I just took your ZIP file, extracted out the 'p12' file and uploaded into a PRPC keystore using the type 'PKCS12' (is that correct?) and set the password to 'password'.
This didn't result in any errors ?
I think I am probably not following the correct steps here ?
Thanks,
John
Virtusa IT Consulting
AE
Hi Seri,
I think you need to add US_export_policy jar file in both JDK and JRE locations like below
C:\Program Files\Java\jdk1.6.0_26\jre\lib\security
and
C:\Program Files\Java\jre6\lib\security
Thanks,
Habeeb Baig
Updated: 2 Feb 2016 21:18 EST
Pegasystems Inc.
AU
I can now confirm the US restriction jars are not current in the PRPC platform's JRE. I will get the client to update this.
Regards
Seri