<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question Re: Knox Gateway Start fail in Support Questions</title>
    <link>https://community.cloudera.com/t5/Support-Questions/Knox-Gateway-Start-fail/m-p/329940#M230554</link>
    <description>&lt;P&gt;Hi, it should.&amp;nbsp;&lt;/P&gt;&lt;P&gt;But when You need to use certs signed with Your organisation use:&lt;/P&gt;&lt;P&gt;convert .p12 to pfx (you will need also pem file)&lt;/P&gt;&lt;PRE&gt;openssl pkcs12 -export -out YOUROWNNAME.pfx -inkey YOUR_KEYS.pem -in YOUR_KEYS.pem -certfile YOUR_KEYS.pem&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;When You manage to get pfx file use:&lt;/P&gt;&lt;PRE&gt;keytool -importkeystore -srckeystore gateway.pfx -srcstoretype pkcs12
 -srcalias [ALIAS_SRC] -destkeystore [MY_KEYSTORE.jks]
 -deststoretype jks -deststorepass [PASSWORD_JKS] -destalias gateway-identity&lt;/PRE&gt;&lt;P&gt;[ALIAS_SRC] -&amp;nbsp; read from pfx file&amp;nbsp;to do that use:&amp;nbsp;&lt;/P&gt;&lt;PRE&gt;keytool -v -list -storetype pkcs12 -keystore&amp;nbsp;YOUROWNNAME.pfx&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;At end use this:&lt;/P&gt;&lt;PRE&gt;mv gateway.jks /var/lib/knox/data-2.6.4.0-91/security/keystores/&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 10 Nov 2021 08:54:32 GMT</pubDate>
    <dc:creator>Arthur_</dc:creator>
    <dc:date>2021-11-10T08:54:32Z</dc:date>
  </channel>
</rss>

