Unable to update my certificate file in pfk format
search cancel

Unable to update my certificate file in pfk format

book

Article ID: 261477

calendar_today

Updated On:

Products

DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Generating ssl certifcate for the UIM using the keystore utility
"C:/Program Files (x86)/GnuWin32/bin/openssl" pkcs12 -in wasp.keystore.p12 -passin pass:(keystore password) -nocerts -out wasp.key -passout pass:(keystore password)
get "Error outputting keys and certificates
440D0000:error:0308010C: digital envelope routines:inner_env_generic_fetch:unsupported:crypto\evp\evp_fetch.c:373:Global default library algorithm (RC2-40-CBC : 0), Properties ()"

 

 
 
 

 

 

Environment

Release : 20.4 any

Cause

Trying to generate the certificate with the keystone tool using the pkcs12 file will result in error, the keystone utility uses jks file format

Resolution

The pfx file was a pkcs12 format and have to be converted to jks format to allow it run with our keystone utility see link below:
https://www.ibm.com/support/pages/how-convert-p12-keystore-jks-keystore for how to convert using the ibm tool