Comments on: Adito Security Certificate – Pain in the butt, but possible

By: rakaris

rakaris — Fri, 14 Mar 2014 17:49:28 +0000

Hi, very great tutorial.
the error:
ERROR KeyStoreManager “Could not get private key with alias importkey”
is because that the tutorial is missing the key password change command execution after keystore password has changed
keytool -keypasswd -keystore keystore.ImportKey -alias importkey

By: jrdalrymple

jrdalrymple — Tue, 11 Mar 2014 01:21:48 +0000

Since I didn’t run into the same problem… I’m not sure. The way it reads though, I’d take a wild guess and say maybe your private key that you put in during the install bit (the http://aditoserver:28080 part) doesn’t match the private key that you put in when you did step eight?

There is a reason the post title contains “pain in the butt” – I think everyone encounters trouble at a different spot during this process. Certificates I understand, the way Java handles certificate stores I’m mostly lost on.

By: Pierrick

Pierrick — Mon, 10 Mar 2014 22:24:14 +0000

Hi,

This is an extremly helpful post. After fighting few hours with Java and Certificates, I re did all from scratch, including the key generation following the guidelines you provided.

Despite my knowledge in IT, I learned a lot and still think these cer/der/crt/der/pem are confusing..

Though.. finally came the start service.. and here, it doesn’t goes through.
Adito logs shows
10-03-2014 23:12:57 [WebServer] INFO LogBootProgressMonitor – Server is now running
10-03-2014 23:12:57 [main-4] ERROR KeyStoreManager – Could not get private key with alias importkey.
java.security.UnrecoverableKeyException: Cannot recover key
at sun.security.provider.KeyProtector.recover(Unknown Source)
…..

Note: I m running Adito on Windows, the Windows port.
Again, all went fine included the installer just the service restart makes it bad

If you have any idea, this would be appreciated !

Regards
Pierrick