(CSA) Support Tip: MPP keystore password and private key password need to be the same

When generating a keystore for MPP, please make sure that keystore password is the same as private key/alias password.

In mpp.json, in the following section the password (here encrypted) is listed in "passphrase":


  "https": {
    "enabled": true,
    "options": {
      "pfx": "../conf/.mpp_keystore",
      "passphrase": "ENC(IkQUShzMD8eqMa1dgaCBuw==)"

In case the private key/alias password is different from keystore password, MPP would not be able to start and the following error (here tested with CSA 4.2 but the same or similar issue would be seen in other versions):

Error: pkcs12 cipherfinal error

would appear in hpmarketplaceportal.err.log.

Parents
  • Thanks Igort, 

    i actually faced that issue earlier , just adding to that if you want to change the provided keystore to another used password for mppkeystore which by default "changeit" you can do that by using the follwoing command.

    keytool –keypasswd -alias "XXXXXXXXXX" -keystore "E:\CSA\.mpp_keystore”

    it will ask for a Following sqeuence:

    >> PAssword for .mpp_kestore

    >>Current Password for provided keystore from CA

    >> New Password for keystore

    >> Confirm New password.

    Hope that would help anyone.

Reply
  • Thanks Igort, 

    i actually faced that issue earlier , just adding to that if you want to change the provided keystore to another used password for mppkeystore which by default "changeit" you can do that by using the follwoing command.

    keytool –keypasswd -alias "XXXXXXXXXX" -keystore "E:\CSA\.mpp_keystore”

    it will ask for a Following sqeuence:

    >> PAssword for .mpp_kestore

    >>Current Password for provided keystore from CA

    >> New Password for keystore

    >> Confirm New password.

    Hope that would help anyone.

Children
No Data