SSL cannot be enabled

Products

• CA Automic Dollar Universe

Issue/Introduction

When trying to enable SSL (./unissl set -enable ON -msport 4443) there is an error message displayed:

Initialize ssl context in error: Error loading private key file '/DUAS/certificate.pem', error:1C800064:Provider routines::bad decrypt
Error opening IO server X service
COM Error u_ouv_serv -1: Errno syserror 2: No such file or directory,Error loading private key file '/DUAS/certificate.pem', error:lC800064:Provider routines::bad decrypt

Environment

Release : 6.x, 7.x

Component: Automic Dollar Universe

Resolution

Verify that there are no invalid characters in the certificate file, as the unissl import command reported no errors. If such erroneous characters are detected, the unissl delete command will also fail to remove them because the certificate is not valid.

To fix the issue is to recreate the private key -> generate a new .csr -> having it signed by the CA --> finally import the root certificate and intermediate certificate as TRUSTEDCACERT and the server certificate as SERVERCERT.

 

Additional Information

In order to delete the bad cert there must be used the ‘unissl import’ command with the ‘-overwrite’ parameter so the bad cert is being replaced before being able to delete it