Skip to main content
Announcements
Join us at Qlik Connect for 3 magical days of learning, networking,and inspiration! REGISTER TODAY and save!
cancel
Showing results for 
Search instead for 
Did you mean: 
matt_irvin
Partner - Contributor
Partner - Contributor

Java Truststore Issue - Default key manager cannot be initialized

Working in a TOS 7.2.1 environment which at some point I think I was messing around with SSL keys. 

 

Now whenever I try to use a tRestClient component or anything leveraging SSL I get the below warning:

[WARN ]: org.apache.cxf.transport.https.SSLUtils - Default key managers cannot be initialized: DerInputStream.getLength(): lengthTag=109, too big.

java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big.

at sun.security.util.DerInputStream.getLength(DerInputStream.java:599)

at sun.security.util.DerValue.init(DerValue.java:391)

at sun.security.util.DerValue.<init>(DerValue.java:332)

at sun.security.util.DerValue.<init>(DerValue.java:345)

at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1938)

at java.security.KeyStore.load(KeyStore.java:1445)

at org.apache.cxf.configuration.jsse.SSLUtils.loadDefaultKeyManagers(SSLUtils.java:122)

at org.apache.cxf.configuration.jsse.SSLUtils.getDefaultKeyStoreManagers(SSLUtils.java:88)

at org.apache.cxf.transport.https.SSLUtils.getSSLContext(SSLUtils.java:75)

at org.apache.cxf.transport.https.HttpsURLConnectionFactory.decorateWithTLS(HttpsURLConnectionFactory.java:147)

at org.apache.cxf.transport.https.HttpsURLConnectionFactory.createConnection(HttpsURLConnectionFactory.java:101)

at org.apache.cxf.transport.http.URLConnectionHTTPConduit.createConnection(URLConnectionHTTPConduit.java:121)

at org.apache.cxf.transport.http.URLConnectionHTTPConduit.setupConnection(URLConnectionHTTPConduit.java:125)

at org.apache.cxf.transport.http.HTTPConduit.prepare(HTTPConduit.java:505)

at org.apache.cxf.interceptor.MessageSenderInterceptor.handleMessage(MessageSenderInterceptor.java:47)

at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)

at org.apache.cxf.jaxrs.client.AbstractClient.doRunInterceptorChain(AbstractClient.java:710)

at org.apache.cxf.jaxrs.client.WebClient.doChainedInvocation(WebClient.java:1051)

at org.apache.cxf.jaxrs.client.WebClient.doInvoke(WebClient.java:897)

at org.apache.cxf.jaxrs.client.WebClient.doInvoke(WebClient.java:866)

at org.apache.cxf.jaxrs.client.WebClient.invoke(WebClient.java:431)

at org.apache.cxf.jaxrs.client.WebClient.get(WebClient.java:611)

at irvingroup.scrapehero_indeedapplicants_0_1.ScrapeHero_IndeedApplicants.tRESTClient_1Process(ScrapeHero_IndeedApplicants.java:2249)

at irvingroup.scrapehero_indeedapplicants_0_1.ScrapeHero_IndeedApplicants.tLoop_1Process(ScrapeHero_IndeedApplicants.java:909)

at irvingroup.scrapehero_indeedapplicants_0_1.ScrapeHero_IndeedApplicants.tJava_3Process(ScrapeHero_IndeedApplicants.java:698)

at irvingroup.scrapehero_indeedapplicants_0_1.ScrapeHero_IndeedApplicants.tJava_4Process(ScrapeHero_IndeedApplicants.java:570)

at irvingroup.scrapehero_indeedapplicants_0_1.ScrapeHero_IndeedApplicants.runJobInTOS(ScrapeHero_IndeedApplicants.java:4107)

at irvingroup.scrapehero_indeedapplicants_0_1.ScrapeHero_IndeedApplicants.main(ScrapeHero_IndeedApplicants.java:3952)

Any ideas on how to resolved this issue or how to determine which truststore is being used that is causing this issue?

 

I know its just a warning but would love to remove this from my logs. 

 

Labels (2)
2 Replies
thalychris
Contributor
Contributor

Hi, 

I have the exact same error.
Any help would be highly appreciated.

 

In the Execution Job, I've set the advanced parameters to :
-Djavax.net.ssl.keyStore=<mykeystorepath>/<mykeystore>

-Djavax.net.ssl.keyStorePassword=<mypassword>

 

Thanks 

thalychris
Contributor
Contributor

Hi, 

I have the exact same error.
Any help would be highly appreciated.

 

In the Execution Job, I've set the advanced parameters to :
-Djavax.net.ssl.keyStore=<mykeystorepath>/<mykeystore>

-Djavax.net.ssl.keyStorePassword=<mypassword>

 

Thanks