Martin- Did you also upgrade from JDK 8? Since JDK 9, the default keystore changed to PKCS12. You may need to create a new, updated keystore for your ssl key+certificate.
-Matt On Jan 14, 2024, at 11:53 AM, Martin Lichtin <mlich...@gmail.com> wrote: With Pax-Web 8 being part of Karaf 4.4.5, it fails at startup with 2024-01-14T18:28:39,157 | ERROR | 1-thread-1 (change controller) | Activator | x.web.service.internal.Activator 623 | 412 - org.ops4j.pax.web.pax-web-runtime - 8.0.24 | Unable to start Pax Web server: Get Key failed: null java.security.UnrecoverableKeyException: Get Key failed: null at sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:396) ~[?:1.8.0_391] at sun.security.provider.KeyStoreDelegator.engineGetKey(KeyStoreDelegator.java:96) ~[?:1.8.0_391] at sun.security.provider.JavaKeyStore$DualFormatJKS.engineGetKey(JavaKeyStore.java:71) ~[?:1.8.0_391] at java.security.KeyStore.getKey(KeyStore.java:1027) ~[?:1.8.0_391] at sun.security.ssl.SunX509KeyManagerImpl.<init>(SunX509KeyManagerImpl.java:145) ~[?:1.8.0_391] at sun.security.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:70) ~[?:1.8.0_391] at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:256) ~[?:1.8.0_391] at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1249) ~[?:?] at org.eclipse.jetty.util.ssl.SslContextFactory$Server.getKeyManagers(SslContextFactory.java:2364) ~[?:?] at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:373) ~[?:?] at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:244) ~[?:?] at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73) ~[?:?] at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169) ~[?:?] at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117) ~[?:?] at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:97) ~[?:?] at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73) ~[?:?] at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169) ~[?:?] at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117) ~[?:?] at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:323) ~[?:?] at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81) ~[?:?] at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234) ~[?:?] at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73) ~[?:?] at org.eclipse.jetty.server.Server.doStart(Server.java:401) ~[?:?] at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73) ~[?:?] at org.ops4j.pax.web.service.jetty.internal.JettyServerWrapper.start(JettyServerWrapper.java:626) ~[?:?] at org.ops4j.pax.web.service.jetty.internal.JettyServerController.start(JettyServerController.java:109) ~[?:?] at org.ops4j.pax.web.service.internal.Activator.performConfiguration(Activator.java:555) ~[?:?] at org.ops4j.pax.web.service.internal.Activator.updateController(Activator.java:445) ~[?:?] at org.ops4j.pax.web.service.internal.Activator.lambda$updateServerControllerFactory$1(Activator.java:347) ~[?:?] at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0_391] at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:1.8.0_391] at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180) [?:1.8.0_391] at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [?:1.8.0_391] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_391] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_391] at java.lang.Thread.run(Thread.java:750) [?:1.8.0_391] Caused by: java.lang.NullPointerException at sun.security.pkcs12.PKCS12KeyStore.engineGetKey(PKCS12KeyStore.java:332) ~[?:1.8.0_391] ... 35 more does anyone know what has changed? -- -- ------------------ OPS4J - http://www.ops4j.org - ops4j@googlegroups.com --- You received this message because you are subscribed to the Google Groups "OPS4J" group. To unsubscribe from this group and stop receiving emails from it, send an email to ops4j+unsubscr...@googlegroups.com<mailto:ops4j+unsubscr...@googlegroups.com>. To view this discussion on the web visit https://groups.google.com/d/msgid/ops4j/33078b63-1247-4b23-bc1f-cda485a31422n%40googlegroups.com<https://groups.google.com/d/msgid/ops4j/33078b63-1247-4b23-bc1f-cda485a31422n%40googlegroups.com?utm_medium=email&utm_source=footer>. -- -- ------------------ OPS4J - http://www.ops4j.org - ops4j@googlegroups.com --- You received this message because you are subscribed to the Google Groups "OPS4J" group. To unsubscribe from this group and stop receiving emails from it, send an email to ops4j+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ops4j/53374D51-EC7B-4D85-B93A-1A04F5CC78D9%40hyte.io.