Win a copy of The Java Performance Companion this week in the Performance forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

PFX to JKS Conversion error

 
Ravikumar Jambunathan
Ranch Hand
Posts: 66
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi Experts,

I have a Java program which converts a PFX key store (generated in another system) into Java key store. The Java key store will be referenced by the application from AIX. The program and conversion was working fine all along. However, when i try to convert the key store renewed recently, i am getting below exception.

java.io.IOException: Error in loading the keystore: Error decoding X.509 CRL from encoding. at com.ibm.crypto.provider.PKCS12KeyStore.engineLoad(Unknown Source) at java.security.KeyStore.load(KeyStore.java:694) at ConvertPKCS12ToJKS.main(ConvertPKCS12ToJKS.java:78)


However, there is no problem in converting the same PFX file in Windows. Here is the log.

Input keystore file = D:/EclipseProjects/GW.pfx_ExportfromIE_Jan
Output keystore file = D:/EclipseProjects\bolero_keystore.jks
Input keystore password = test2
Output keystore password = password
Keystore provider name = Sun JSSE provider(PKCS12, SunX509 key/trust factories, SSLv3, TLSv1)
alias=[{4448e346-018f-4e47-b452-a27fb3688f5b}]
Keystore converstion complete.


But, when i try to check the converted key store in AIX using key tool command, it fails opening with the below keytool error

keytool error (likely untranslated): java.security.cert.CertificateParsingException: java.io.IOException: java.io.IOException: DerValue.getIA5String, not IA5 30

I have already applied the more relaxed security jar files from IBM, still the problem persists.

I am using Java 1.5

Can somebody help on this please?
Thanks in advance for your help.

Regards,
Ravi.
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic