Adding LDAP or SMTP SSL certificate to the list of trusted certificates on the Cryptshare server -

Adding LDAP or SMTP SSL certificate to the list of trusted certificates on the Cryptshare server -


Applies to:

All versions of Cryptshare Server

Symptom:

The connection to LDAP cannot be established using SecureLDAP or connection to SMTP Host cannot be established using secure connection

Cause:

Usually a self-signed SSL certificate is installed on LDAP or SMTP server, which cannot be trusted by Java

Solution:

Method 1) Using the Windows GUI:

The simplest way to install certificates is to download and install a program called Keystore Explorer to import your certificate into the keystore. The default password for the keystore is "changeit"

Method 2) Using the Command Line:

Import the LDAP or SMTP SSL certificate to Java keystore of Cryptshare Installation Linux Server

  • copy the SSL certificate in x.509 format (.cer, .crt, .pem) to the folder /root
  • log in as root on the appliance
  • change into Java folder and change the permissions for keytool
cd /opt/cryptshare-3/jre/bin/
chmod +x keytool
  • import the SSL certificate
./keytool -import -trustcacerts -keystore ../lib/security/cacerts -alias <sitename> -file <SSL Certificate>

where <alias> is the name of LDAP or SMTP server and <SSL Certificate> is the certificate inclusive the path, e.g.  /root/LDAP-SSL-certificate.crt or /root/SMTP-SSL-certificate.crt The default password for the JAVA certificate storage  is changeit

  • restart Cryptshare service
systemctl restart cryptshare (use rccryptshare restart up to and including v.7.1)

Windows Server

  • copy the SSL certificate in x.509 format (.cer, .crt, .pem) to the server
  • open command line
  • change into Cryptshare Java folder
cd <Cryptshare installation folder>\jre\bin
  • import the SSL certificate
keytool.exe -import -trustcacerts -keystore ..\lib\security\cacerts -alias <sitename> -file <SSL Certificate>

where <alias> is the name of LDAP server and <SSL Certificate> is the certificate inclusive the path, e.g.  <User Desktop>\LDAP-SSL-certificate.crt or <User Desktop>\SMTP-SSL-certificate.crt The default password for the JAVA certificate storage  is changeit

  • restart Cryptshare service

Now the SecureLDAP connection should work fine.


    • Related Articles

    • SSL certificates

      Applies to All versions of Cryptshare Server Purpose In this article, you will find an overview on how to set up a new SSL certificate, install your wildcard certificate, generate a CSR or resolve certificate related error messages. Solution ...

    • SSL Certificates: XCA Tool

      Applies to: All Cryptshare Server versions Purpose: This is an example how to check correlation between SSL certificate, private key and CSR file Solution: download and start XCA tool create new database import certificate, private key and ...

    • Installation of an existing SSL certificate (e.g. wildcard SSL certificate) -

      Applies to: All versions of Cryptshare Server Purpose: This article describes how to install an already existing SSL certificate (e.g. wildcard SSL certificate) to your Cryptshare Server Solution: 1. Create new Java-Keystore with KeyStore Explorer 2. ...

    • Start failed after SSL certificate installation

      Applies to: All versions of Cryptshare Server Symptom: Cryptshare start fails after new keystore is created or SSL certificate is installed to it. Cause: The most common reason is a wrong keystore format or a wrong password. Solution: Please check ...

    • The requested public SSL certificate cannot be imported

      Applies to All versions of Cryptshare Server Symptom The requested SSL certificate cannot be imported into the keystore with the following error: English: Could not establish trust for the CA Reply. German: Vertrauenskette für die CA Antwort konnte ...