Error running the sslConfig.sh script on Spectrum - Keystore was tampered with, or password was incorrect

Products

• Network Observability
• Spectrum

Issue/Introduction

Recently completed the migration from Spectrum 10.3.2 to 25.4.1 and having issues to configure the HTTPS for OneClick server.

The following message is displayed after running the $SPECROOT/lib/sslConfig.sh script:

keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect

ERROR: Generating self-signed certificate failed with exit code 1.

Environment

DX NetOps Spectrum 25.4.x

Cause

The customer copied the $SPECROOT/custom folder from the old 10.3.2 host to the new host 25.4.1, which included the keystore folder along with cacerts file.

Resolution

1. Run sslConfig.sh and disable HTTPS. Select option 2 to disable it:  2) Disable HTTPS for OneClick (Reverts to HTTP)

2. Copy the default (Out Of the Box) $SPECROOT/Java/lib/security/cacerts file to the $SPECROOT/custom/keystore/ directory.

3. Run sslConfig.sh and  enable HTTPS. Select option 1 to enable it: 1) Enable HTTPS for OneClick (Generates Self-Signed or Imports CA Cert)