java.io.IOException: DerInputStream.getLength() too big for ssl.truststore

cancel
Showing results for 
Search instead for 
Did you mean: 
Established Member II

java.io.IOException: DerInputStream.getLength() too big for ssl.truststore

Jump to solution

Hi, i want to install a server certificate for call some soap service on a https connection , so i'm going to install some certificate on the "ssl.trustore" under "/opt/alfresco-community/alf_data/keystore/ssl.trustore" but when i use the terminal command of keytool (with the internal java machine of alfresco), it's give me the following exception:

keytool --list -keystore /opt/alfresco-community/alf_data/keystore/ssl.trustore -storetype PKCS12 -storepass <PASS>

java.io.IOException: DerInputStream.getLength(): lengthTag=78, too big.
        at java.base/sun.security.util.DerInputStream.getLength(DerInputStream.java:606)
        at java.base/sun.security.util.DerValue.init(DerValue.java:390)
        at java.base/sun.security.util.DerValue.<init>(DerValue.java:331)
        at java.base/sun.security.util.DerValue.<init>(DerValue.java:344)
        at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1953)
        at java.base/sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:222)
        at java.base/java.security.KeyStore.load(KeyStore.java:1479)
        at java.base/sun.security.tools.keytool.Main.doCommands(Main.java:899)
        at java.base/sun.security.tools.keytool.Main.run(Main.java:389)
        at java.base/sun.security.tools.keytool.Main.main(Main.java:382)

I know is not a related bug to alfresco , but instead to the jdk, but i wonder if  anyone have found another way to import the certificates on the ssl.trustsore?

The alfresco version is the community 5.2.

Ty in advance.

1 Solution

Accepted Solutions
Highlighted
Established Member II

Re: java.io.IOException: DerInputStream.getLength() too big for ssl.truststore

Jump to solution

Can't found a solution with the standard keytool of java, but this program solve all my issue with the p12 keystores of alfresco:

KeyStore Explorer - Download 

Hope can help someone, encounter my same issue.

View solution in original post

1 Reply
Highlighted
Established Member II

Re: java.io.IOException: DerInputStream.getLength() too big for ssl.truststore

Jump to solution

Can't found a solution with the standard keytool of java, but this program solve all my issue with the p12 keystores of alfresco:

KeyStore Explorer - Download 

Hope can help someone, encounter my same issue.

View solution in original post