[자바7] openssl tomcat 실행 오류 Invalid keystore format

이클립스 톰캣에  ssl을 적용하다 오류가 났다.

 

타 블로그를 참고하여 Openssl 이용해 키를 만들고 톰캣 server.xml에 설정을 추가한 뒤 실행하였다.

 

 

Invalid keystore format 오류가 발생하였다.

 

 

심각: Failed to initialize connector [Connector[org.apache.coyote.http11.Http11Protocol-443]]
org.apache.catalina.LifecycleException: 프로토콜 핸들러 초기화가 실패했습니다.
	at org.apache.catalina.connector.Connector.initInternal(Connector.java:1115)
	at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
	at org.apache.catalina.core.StandardService.initInternal(StandardService.java:571)
	at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
	at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:874)
	at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
	at org.apache.catalina.startup.Catalina.load(Catalina.java:646)
	at org.apache.catalina.startup.Catalina.load(Catalina.java:669)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:606)
	at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:305)
	at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:475)
Caused by: java.lang.IllegalArgumentException: Invalid keystore format
	at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:108)
	at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:72)
	at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:205)
	at org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup(AbstractEndpoint.java:1221)
	at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1234)
	at org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.java:230)
	at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:633)
	at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:80)
	at org.apache.catalina.connector.Connector.initInternal(Connector.java:1112)
	... 13 more
Caused by: java.io.IOException: Invalid keystore format
	at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:650)
	at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:55)
	at java.security.KeyStore.load(KeyStore.java:1214)
	at org.apache.tomcat.util.security.KeyStoreUtil.load(KeyStoreUtil.java:69)
	at org.apache.tomcat.util.net.SSLUtilBase.getStore(SSLUtilBase.java:216)
	at org.apache.tomcat.util.net.SSLHostConfigCertificate.getCertificateKeystore(SSLHostConfigCertificate.java:207)
	at org.apache.tomcat.util.net.SSLUtilBase.getKeyManagers(SSLUtilBase.java:282)
	at org.apache.tomcat.util.net.SSLUtilBase.createSSLContext(SSLUtilBase.java:246)
	at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:106)
	... 21 more

 

실행하는 환경 

이클립스

톰캣버전 : 8.5

톰캣 JRE : 7 

 

JRE 8 환경에서 실행하면

해당오류가 발생하지는 않았다.

 

그래서 자바 1.7 환경에서는 TLS default 1.0 이라 발생하는 문제인것 같아서

톰캣서버-EditConfiguration -VM argument 에 설정을 추가하여 

-Dhttps.protocols=TLSv1.2 -Djdk.tls.client.protocols=TLSv1.2

진행하였는데 문제는 해결되지 않았다.

 

 

 

 

 

 

해결은 간단했다.

 

톰캣 server.xml에서 SSL 설정 하는 부분에 

keystoreType="PKCS12" 추가하였더니 오류는 발생하지 않았다.

 

 

 

수정 후 톰캣 server.xml 설정

<Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
keystoreFile="/키스토어가있는 디렉토리/.keystore" keystorePass="123456"
clientAuth="false" sslProtocol="TLS" keystoreType="PKCS12" />

 

 

 

 

 

 

 

 

 

 

참고.

 

https://lts0606.tistory.com/220#

테스트용 SSL 톰캣 적용기 (SSL Tomcat, OpenSSL)

 

https://ls-altr.tistory.com/70

SSL 통신을 위한 WAS 내 Java 설정_https 호출

https://stackoverflow.com/questions/33335979/tomcat-8-invalid-keystore-format

Tomcat 8: Invalid keystore format

 

https://gaesae.com/113

톰캣 JDK 1.7로 구동되는 환경에서 TLS1.2 통신되게 설정하기