<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi,<br>
<br>
Im currently having trouble supplying an self-signed SSL
Certificate to a shibboleth IDP:<br>
<br>
Im generating the self-signed certificate using:<br>
<br>
<i>keytool -genkeypair -alias jetty -validity 365 -keyalg RSA
-keysize 2048 -keystore /opt/shibboleth-idp/idp-userfacing.p12
-storetype pkcs12<br>
<br>
</i>My idp.ini is setup to use the default keystore.<br>
</p>
<p>Starting jetty i get the following error:<br>
</p>
<pre><div style="color: #cacaca; background-color: #00000000; font-family: "Consolas", "monospace-fallback", "monospace"; font-size: 14px;"><div><pre><div style="color: #cacaca; background-color: #00000000; font-family: "Consolas", "monospace-fallback", "monospace"; font-size: 14px;"><div><span>Exception in thread "main" java.io.IOException: keystore password was incorrect</span></div><div><span> at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2159)</span></div></div></pre></div></div></pre>
<p>I double and triple checked the keystore password and it is
correct. Keytool is able to open the store<br>
I even tried using the default password but that still doesn't
work.<br>
<br>
Using Shibboleth IDP 4.3.1<br>
Jetty 10.0.15<br>
Corretto-17.0.7.7.1<br>
<br>
I hope someone can help me out here. <br>
</p>
<div class="moz-signature">-- <br>
Mit freundlichen Grüßen/Best Regards<br>
<b>Timo Brunn</b><br>
<br>
Website: <a href="https://timo-brunn.de" moz-do-not-send="true">timo-brunn.de</a><br>
<i><font size="1">Um ihre Echtheit zu bestätigen, wurde diese
E-Mail digital signiert.<br>
To prove its authenticity, this E-Mail has been digitally
signed.</font></i></div>
</body>
</html>