Re: [jetty-users] Jetty 10 SSL Problem

[Simone Bordet <sbordet@xxxxxxxxxxx>]

Full stack trace?


On Wed, Jun 28, 2023 at 6:25 PM Timo Brunn <timo@xxxxxxxxxxxxx> wrote:
>
> Hi,
>
> I just checked and there aren't any trailing spaces.
>
> My actual key has a password.
> Thats why i set keyManagerPassword.
>
> I had a few test keystores with and without key password.
> Neither worked.
>
> On my current test keystore my key password and keystore password are the same.
>
> Mit freundlichen Grüßen/Best Regards
> Timo Brunn
>
> Website: timo-brunn.de
> Um ihre Echtheit zu bestätigen, wurde diese E-Mail digital signiert.
> To prove its authenticity, this E-Mail has been digitally signed.
> On 28/06/2023 17:46, Simone Bordet wrote:
>
> Hi,
>
> On Wed, Jun 28, 2023 at 4:45 PM Timo Brunn <timo@xxxxxxxxxxxxx> wrote:
>
> Hi,
>
> Im currently having trouble supplying an self-signed SSL Certificate to jetty:
>
> Im generating the self-signed certificate and keystore using:
>
> keytool -genkeypair -alias jetty -validity 365 -keyalg RSA -keysize 2048 -keystore jetty.p12 -storetype pkcs12
>
> My SSLContext looks like this now:
>
> jetty.sslContext.keyStorePath=jetty.p12
> jetty.sslContext.trustStorePath=jetty.p12
>
>
> jetty.sslContext.keyStoreType=PKCS12
> jetty.sslContext.trustStoreType=PKCS12
>
> jetty.sslContext.keyStorePassword=changeit
> jetty.sslContext.trustStorePassword=changeit
> jetty.sslContext.keyManagerPassword=changeit
>
> Starting jetty i get the following error:
>
> Exception in thread "main" java.io.IOException: keystore password was incorrect
>         at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2159)
>
> I double and triple checked the keystore password and it is correct. Keytool is able to open the store
>
> Check that you don't have white space after "changeit".
>
> Why did you specify the keyManagerPassword?
> Is it the same as the keyStore?
>


-- 
Simone Bordet
----
http://cometd.org
http://webtide.com
Developer advice, training, services and support
from the Jetty & CometD experts.