Dear All,
Is there any limitation to support PKCS#12 type SSL certificate in
Tomcat.
As per Tomcat User Guide, Tomcat currently operates with JKS, PKCS11 or
PKCS12 format keystores.
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html
But, I'm unable to use PKCS#12 certificate in my Tomcat.
It throws:
java.io.IOException: Invalid keystore format
at
sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:633)
at
sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38)
at java.security.KeyStore.load(KeyStore.java:1185)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFac
tory.java:287)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocket
Factory.java:227)
at
org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JSSE1
4SocketFactory.java:142)
at
org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFac
tory.java:110)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
tFactory.java:89)
at
org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.
java:293)
at
org.apache.coyote.http11.Http11BaseProtocol.init(Http11BaseProtocol.java
:139)
at
org.apache.catalina.connector.Connector.initialize(Connector.java:1017)
at
org.apache.catalina.core.StandardService.initialize(StandardService.java
:578)
at
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
82)
at
org.apache.catalina.startup.Catalina.load(Catalina.java:504)
at
org.apache.catalina.startup.Catalina.load(Catalina.java:524)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at
org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:267)
at
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
Could you please throw some light on PKCS#12 type certificate support.
Please let me know in case any details are needed.
Thanks,
-Hitesh