Shibboleth IDP 4 SSL Keystore error

Timo Brunn timo at timo-brunn.de
Tue Jun 27 18:22:29 UTC 2023


Hi,

Im currently having trouble supplying an self-signed SSL Certificate to 
a shibboleth IDP:

Im generating the self-signed certificate using:

/keytool -genkeypair -alias jetty -validity 365 -keyalg RSA -keysize 
2048 -keystore /opt/shibboleth-idp/idp-userfacing.p12 -storetype pkcs12

/My idp.ini is setup to use the default keystore.

Starting jetty i get the following error:

Exception in thread "main" java.io.IOException: keystore password was 
incorrect
at 
java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2159)

I double and triple checked the keystore password and it is correct. 
Keytool is able to open the store
I even tried using the default password but that still doesn't work.

Using Shibboleth IDP 4.3.1
Jetty 10.0.15
Corretto-17.0.7.7.1

I hope someone can help me out here.

-- 
Mit freundlichen Grüßen/Best Regards
*Timo Brunn*

Website: timo-brunn.de <https://timo-brunn.de>
/Um ihre Echtheit zu bestätigen, wurde diese E-Mail digital signiert.
To prove its authenticity, this E-Mail has been digitally signed./
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230627/b5667eab/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4488 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20230627/b5667eab/attachment.p7s>


More information about the users mailing list