| Author | 
		  Message
		 | 
		
		  | chikku | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 5:39 am    Post subject: Webservice SSL certificate Installation Issue | 
				     | 
			   
			 
		   | 
		
		
		   Newbie
 
 Joined: 19 Aug 2013 Posts: 9
  
  | 
		  
		    
			  
				Hi 
 
 
I am trying to install the SSL certificate in production Broker.
 
 
I recieved a .p7b file from CA.When I tried importing the certificate using the below command
 
 
gsk7cmd -cert -import -db certnew.p7b -label rootCert -type pkcs12 -target PRBR01.jks
 
 
I get the below error
 
A password is required to access the source key database.
 
Please enter a password:
 
 
 
An IO Exception has occurred:
 
DerInputStream.getLength(): lengthTag=127, too big.
 
 
 
Can anyone help me sort this. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | lancelotlinc | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 5:43 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Jedi Knight
 
 Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA 
  | 
		  
		    
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | chikku | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 5:57 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Newbie
 
 Joined: 19 Aug 2013 Posts: 9
  
  | 
		  
		    
			  
				Thanks for the reply but I had already set the password while creating the keystore.Also I tried the default password change it.
 
 
Its the same error as above.
 
 
Is it anything to do with the certificate provided. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | lancelotlinc | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 6:04 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Jedi Knight
 
 Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA 
  | 
		  
		    
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | chikku | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 6:14 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Newbie
 
 Joined: 19 Aug 2013 Posts: 9
  
  | 
		  
		    
			  
				Have used the same link to execute the commands The first 2 commands have been successful.I started getting the error as above while executing the below step.
 
 
Importing a certificate for production use
 
 
Import a personal certificate from a certificate authority for production use.
 
 
Issue the following command:
 
   
	| Code: | 
   
  
	gsk7cmd -cert -import
 
  -db pkcs12_file_name
 
  [-pw pkcs12_password]
 
  -label label 
 
  -type pkcs12
 
  -target keystore_name
 
  [-target_pw keystore_password][code][/code][code][/code] | 
   
 
  Last edited by chikku on Mon Aug 19, 2013 6:18 am; edited 1 time in total | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | lancelotlinc | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 6:16 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Jedi Knight
 
 Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA 
  | 
		  
		    
			  
				Try keytool. Note keytool has different switches on its command line. Please use [c o d e ] tags here in the forum (please edit your above posts). _________________ http://leanpub.com/IIB_Tips_and_Tricks
 
Save $20: Coupon Code: MQSERIES_READER | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | chikku | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 6:29 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Newbie
 
 Joined: 19 Aug 2013 Posts: 9
  
  | 
		  
		    
			  
				| The command got executed successfully | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | lancelotlinc | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 6:32 am    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		    Jedi Knight
 
 Joined: 22 Mar 2010 Posts: 4941 Location: Bloomington, IL USA 
  | 
		  
		    
			  
				
   
	| chikku wrote: | 
   
  
	| The command got executed successfully | 
   
 
 
 
Wonderful ! Note that the gsk package gets updated from time-to-time. You might have a really old version of it. You should download latest from IBM site if you intend on using it. Else you can continue to use keytool. _________________ http://leanpub.com/IIB_Tips_and_Tricks
 
Save $20: Coupon Code: MQSERIES_READER | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | chikku | 
		  
		    
			  
				 Posted: Mon Aug 19, 2013 9:58 pm    Post subject:  | 
				     | 
			   
			 
		   | 
		
		
		   Newbie
 
 Joined: 19 Aug 2013 Posts: 9
  
  | 
		  
		    
			  
				| ok will do that.Thanks a lot. | 
			   
			 
		   | 
		
		
		  | Back to top | 
		  
		  	
		   | 
		
		
		    | 
		
		
		  | 
		    
		   |