Does SslConfig support using encrypted key files with passwords

Products

• CA Performance Management - Usage and Administration

Issue/Introduction

Does SslConfig support using encrypted key files with passwords

java.security.InvalidKeyException: IOException : Short read of DER length

Environment

All supported releases of Performance Management

Cause

At this point in time, no, SslConfig does NOT have the capability to work with encrypted key files.  When attempting to utilize one of these files, SslConfig will display an error like:

java.security.InvalidKeyException: IOException : Short read of DER length

Resolution

You can do one of two things:

1. Decrypt/remove the password from the key

2. Manually generate your own keystore using your key and certificate and following the manual configuration steps:

PC:

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/performance-management/21-2/securing/set-up-https/enable-https-for-netops-portal/enable-performance-center-to-use-ssl-manually.html

DA:

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/performance-management/21-2/securing/set-up-https/enable-https-for-the-data-aggregator/enable-the-data-aggregator-to-use-ssl-manually.html