[jboss-jira] [JBoss JIRA] (WFLY-3686) "Invalid keystore format" IOException when using PKCS12 keystore in Wildfly 8.1.0.Final

[Lars Michaelis (JIRA)]

Lars Michaelis created WFLY-3686:
------------------------------------

             Summary: "Invalid keystore format" IOException when using PKCS12 keystore in Wildfly 8.1.0.Final
                 Key: WFLY-3686
                 URL: https://issues.jboss.org/browse/WFLY-3686
             Project: WildFly
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Security
    Affects Versions: 8.1.0.Final
            Reporter: Lars Michaelis
            Assignee: Darran Lofthouse


Up to now I am using a JKS file to activate SSL. 

This works
{code}<server-identities>
    <ssl protocol="TLS">
        <keystore path="mykeystore.jks" relative-to="jboss.server.config.dir" keystore-password="xxx"/>
    </ssl>
</server-identities>{code}

This does not work:

{code}<server-identities>
    <ssl protocol="TLS">
        <keystore path="keystore.p12" relative-to="jboss.server.config.dir" keystore-password="xxx"/>
    </ssl>
</server-identities>{code}

Exception is

{code}Caused by: java.io.IOException: Invalid keystore format
	at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:650) [rt.jar:1.7.0_55]
	at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:55) [rt.jar:1.7.0_55]
	at java.security.KeyStore.load(KeyStore.java:1214) [rt.jar:1.7.0_55]
	at org.jboss.as.domain.management.security.FileKeystore.load(FileKeystore.java:113)
	... 6 more{code}

WFLY-2229 says PKCS12 is supported. I found no way to specify a keystore format in documentation (https://docs.jboss.org/author/display/WFLY8/Detailed+Configuration) . Is it correct?



--
This message was sent by Atlassian JIRA
(v6.2.6#6264)