"Alias name [null] does not identify a key entry" error seen in Spectrum tomcat log

Products

• CA Spectrum
• DX NetOps

Issue/Introduction

After configuring Spectrum OneClick for SSL, the following error is seen in the $SPECROOT/tomcat/logs/stdout.log (Windows) or catalina.out (Linux) and HTTPS does not work.

Alias name [null] does not identify a key entry

Environment

Any Spectrum supported version

 

Cause

Corrupted CSR file

Resolution

1. Remove the current $SPECROOT/custom/keystore/cacerts file

2. Copy the $SPECROOT/Java/jre/lib/security/cacerts file to the $SPECROOT/custom/keystore directory

3. Recreate the CSR as discussed in the "Request a CA-Signed Certificate" section of the documentation: 

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/23-3/configure-oneclick-for-secure-sockets-layer.html#concept.dita_93a9c4a8b9c7669849f4ba0735c4cff1e7065984_request