question Re: How can I export private key from gateway.jks in Archives of Support Questions (Read Only)

How can I export private key from gateway.jks

hosako — Tue, 07 Feb 2017 17:06:46 GMT

I would like to get the private key from gateway.jks and tried the following command on my test cluster:

keytool -importkeystore -srckeystore ./gateway.jks -destkeystore gateway.jks -srcstoretype JKS -deststoretype PKCS12 -srcstorepass hadoop -srckeypass hadoop -deststorepass changeit -destkeypass changeit

Then getting error:

keytool error: java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big.

Does anyone know how to fix/workaround above error?

Re: How can I export private key from gateway.jks

alexandruanghel — Tue, 07 Feb 2017 17:59:40 GMT

The destination and source keystore are the same file: gateway.jks

Change the filename of -destkeystore gateway.jks maybe -destkeystore gateway.p12?

You'll also need to specify the alias: -alias gateway-identity

Re: How can I export private key from gateway.jks

apappu — Wed, 08 Feb 2017 00:14:49 GMT

@Hajime

Seems like your keystore file is not valid. Are you able to do -list operation on that file? if the keystore file is not sensitive you can attach it here, can validate the file

Re: How can I export private key from gateway.jks

hosako — Wed, 08 Feb 2017 05:44:13 GMT

yes, it was my stupid typo. Thanks!