Re: [EXTERNAL] Keytool issue with version 3.0.2.

2022-05-19 Thread Mark Hack
I may have a mixed Java environment. I will recheck on a clean VM when I get a few minutes. Regards Mark Hack On Thu, 2022-05-19 at 16:46 +0200, Djordje Gavrilovic wrote: > Hm, not working here. > > openjdk version "1.8.0_312" > > OpenJDK Runtime Environment (build >

Re: [EXTERNAL] Keytool issue with version 3.0.2.

2022-05-19 Thread Djordje Gavrilovic
Hm, not working here. openjdk version "1.8.0_312" OpenJDK Runtime Environment (build 1.8.0_312-8u312-b07-0ubuntu1-b07) OpenJDK 64-Bit Server VM (build 25.312-b07, mixed mode) Am I correct, the only thing you changed was leaving out the -srcstoretype PKCS12 part? Also, you did not use -legacy

Re: [EXTERNAL] Keytool issue with version 3.0.2.

2022-05-19 Thread Mark Hack
I installed java 8 and it seems to work there on the latest versions as well java -versionopenjdk version "1.8.0_312"OpenJDK Runtime Environment (build 1.8.0_312-8u312-b07-0ubuntu1~20.04-b07)OpenJDK 64-Bit Server VM (build 25.312-b07, mixed mode) On Thu, 2022-05-19 at 16:02 +0200, Djordje

Re: [EXTERNAL] Keytool issue with version 3.0.2.

2022-05-19 Thread Djordje Gavrilovic
Thank you both for your answers! So much! Both of them very helpful. We are stuck with openjdk8 right now...but it is good to know that later versions will work as expected. Thank you guys On 19.5.22. 15:41, Mark Hack wrote: Works for me and since the later versions of java accept both JKS and

Re: [EXTERNAL] Keytool issue with version 3.0.2.

2022-05-19 Thread Mark Hack
Works for me and since the later versions of java accept both JKS and PKCS12 you do not have to specify the input store type. java --versionopenjdk 11.0.15 2022-04-19OpenJDK Runtime Environment (build 11.0.15+10-Ubuntu-0ubuntu0.20.04.1)OpenJDK 64-Bit Server VM (build

Re: [EXTERNAL] Keytool issue with version 3.0.2.

2022-05-19 Thread Erwann Abalea via openssl-users
Bonjour, OpenSSL 3 changed the default ciphers used to protect the private keys and certificates when creating a PKCS#12, to use something less aging. Try adding a "-legacy" when creating the PKCS#12 file with OpenSSL3 and see if keytool can read it. On Thu, May 19, 2022 at 11:53 AM Djordje