AnsweredAssumed Answered

java.io.IOException: DerInputStream.getLength() too big for ssl.truststore

Question asked by 4535992 on Nov 22, 2017
Latest reply on Dec 18, 2017 by 4535992

Hi, i want to install a server certificate for call some soap service on a https connection , so i'm going to install some certificate on the "ssl.trustore" under "/opt/alfresco-community/alf_data/keystore/ssl.trustore" but when i use the terminal command of keytool (with the internal java machine of alfresco), it's give me the following exception:

 

keytool --list -keystore /opt/alfresco-community/alf_data/keystore/ssl.trustore -storetype PKCS12 -storepass <PASS>

java.io.IOException: DerInputStream.getLength(): lengthTag=78, too big.
        at java.base/sun.security.util.DerInputStream.getLength(DerInputStream.java:606)
        at java.base/sun.security.util.DerValue.init(DerValue.java:390)
        at java.base/sun.security.util.DerValue.<init>(DerValue.java:331)
        at java.base/sun.security.util.DerValue.<init>(DerValue.java:344)
        at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1953)
        at java.base/sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:222)
        at java.base/java.security.KeyStore.load(KeyStore.java:1479)
        at java.base/sun.security.tools.keytool.Main.doCommands(Main.java:899)
        at java.base/sun.security.tools.keytool.Main.run(Main.java:389)
        at java.base/sun.security.tools.keytool.Main.main(Main.java:382)

 

I know is not a related bug to alfresco , but instead to the jdk, but i wonder if  anyone have found another way to import the certificates on the ssl.trustsore?

The alfresco version is the community 5.2.

Ty in advance.

Outcomes