keytool command returns "Invalid keytore format" error

Products

• Autosys Workload Automation

Issue/Introduction

When attempting to run the keytool command using the AutoSys Web Server or WebUI (WCC) keystore, it fails with a keystore format error...

keytool -v -list -keystore ./.keystore -storepass changeit

keytool error: java.io.IOException: Invalid keystore format

java.io.IOException: Invalid keystore format

        at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:666)

        at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:57)

        at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)

        at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:71)

        at java.security.KeyStore.load(KeyStore.java:1445)

        at sun.security.tools.keytool.Main.doCommands(Main.java:825)

        at sun.security.tools.keytool.Main.run(Main.java:368)

        at sun.security.tools.keytool.Main.main(Main.java:361)

 

Environment

Release : 11.3.6 SP8 and higher

Component : AUTOSYS WORKLOAD AUTOMATION

Resolution

Starting with AutoSys 11.3.6 SP8, the keystore type for all of the keystores in the product were switched to BCFKS. That means when you run the keytool command for anything, you need to have the '-storetype BCFKS' parameter included. Otherwise, the keytool command will assume the keystore is the default type, which is JKS. Run this instead...

keytool -v -list -keystore ./.keystore -storepass changeit -storetype BCFKS