Gets the "Error outputting keys and certificates" while creating a Virtual Appliance SSL certificate

Products

• CA Identity Manager
• CA Identity Suite
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

Running the command below to generate SSL certifcate for the Virtual Appliance

/opt/CA/VirtualAppliance/apache-ssl-certificates/openssl" pkcs12 -in xxxxxx.pfx -clcerts -nokeys -out yyyyyy.key

Generates the error below:
"Error outputting keys and certificates 23B9200AB:error:0308010C: digital envelope routines:inner_env_generic_fetch:unsupported:crypto/evp/evp_fetch.c:373:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()"

Environment

Virtual Appliance 14.4 and 14.5

Cause

Trying to generate the certificate with the keystone tool using the pkcs12 file will result in error, the keystone utility uses JKS file format

Resolution

The pfx file was a pkcs12 format and have to be converted to jks format to allow it run with our keystone utility see link below:

See the IBM link below for how to convert using the ibm tool:
https://www.ibm.com/support/pages/how-convert-p12-keystore-jks-keystore