WSO2 Bad_certificate in starting of API manager

user_17925094 0
Viewed 169

Good afternoon, I use api manager 4.0 in my company and I realized that the wso2carbon certificate at JKS is about to expire on the 25th of January. I tried to generate a new certificate following the documentation but I get the following error:

ERROR - BinaryDataReceiver Error while reading from the socket. javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate

Can you help me?

wso2
1 Answers
ERROR - BinaryDataReceiver Error while reading from the socket. javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate

The above error can occur when all root, intermediate, and signed certificates are not correctly imported to the key store. Therefore, please try to recreate and import it correctly, and you can refer to the below details to renew the certificates.

  • You can create a new key store by following this document[1] and configuring it as the primary key store in the toml file.
  • To renew the CA-singed certificate, you can follow this document[2].
  • Once you got the new certificate or key store, please make sure to add the public key of the primary key store to the client trust store.
  • If you are generating a new key store, you can point your old primary Keystore as the Internal key store in the toml file[3], and a new key store should be pointed as the primary key store in the toml file.

Once you have done the change, please restart the servers to apply them correctly.

[1]. https://apim.docs.wso2.com/en/latest/install-and-setup/setup/security/configuring-keystores/keystore-basics/creating-new-keystores/#creating-new-keystores [2]. https://apim.docs.wso2.com/en/latest/install-and-setup/setup/security/configuring-keystores/keystore-basics/renewing-a-ca-signed-certificate-in-a-keystore/ [3]. https://apim.docs.wso2.com/en/latest/install-and-setup/setup/security/configuring-keystores/configuring-keystores-in-wso2-api-manager/#configuring-the-internal-keystore

user_76662480
Related