2

I have been given a .pem file and a password by the client company to add on JBOSS AS7 .

here is what i have done :

  1. keytool -import -alias runtime -file mymobile.com.pem -keystore /opt/my/ssl/my.keystore
  2. It prompts for the password for keystore and I pass the password given to me .
  3. After that it confirms the password and then asks if i trust the certificate
  4. On entering a YES ,it displays a message that certificate has been added to the keystore and keystore is generated at the specified path.
  5. Now I add the following in standalone.xml in my jboss: ssl name="ssl" key-alias="runtime" password="mypass" certificate-key-file="/opt/my/ssl/jboss.keystore" cipher-suite="ALL" protocol="TLS"

But when I restart the JBOSS . It throws me error :

2013-03-14 10:18:32,249 ERROR [org.apache.coyote.http11.Http11Protocol] (MSC service thread 1-22) Error initializing endpoint: java.io.IOException: **Alias name runtime does not identify a key entry**
    at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:517) [jbossweb-7.0.13.Final.jar:]
    at org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:452) [jbossweb-7.0.13.Final.jar:]
    at org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:168) [jbossweb-7.0.13.Final.jar:]
    at org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:977) [jbossweb-7.0.13.Final.jar:]
    at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:190) [jbossweb-7.0.13.Final.jar:]
    at org.apache.catalina.connector.Connector.init(Connector.java:983) [jbossweb-7.0.13.Final.jar:]

Please help me for this as I have pressure from the client for this ....

10
  • "Now I add the following" - you don't state what you've added to standalone.xml. Mar 14, 2013 at 21:40
  • hey Simon ....i have added what i did in standalone...reagrding the keystore ..please look if u have any clue
    – user111001
    Mar 14, 2013 at 21:53
  • Could you post your output for keytool -list -v -alias runtime -keystore /opt/my/ssl/my.keystore Mar 14, 2013 at 21:56
  • Is the original PEM file a PKCS12 file? If so, you might want to try -importkeystore instead of -import in the first keytool command.
    – martijno
    Mar 14, 2013 at 22:04
  • here is the outout of the command u asked :Enter keystore password: runtime, Mar 14, 2013, trustedCertEntry, Certificate fingerprint (SHA1): 1D:27:97:E4:8B:86:45:96:47:1B:BB:F0:3D:F0:5C:BF:E6:CE:DB:B9
    – user111001
    Mar 14, 2013 at 22:09

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.