glassfish 证书过期错误SEVERE: SEC5054: Certificate has expired:

最新推荐文章于 2024-07-24 12:32:45 发布

原创最新推荐文章于 2024-07-24 12:32:45 发布 · 710 阅读

1 ·

CC 4.0 BY-SA版权

文章标签：

#javascript #ViewUI

JavaEE 专栏收录该内容

21 篇文章

订阅专栏

本文介绍了解决因证书过期导致的GlassFish服务器错误的方法。通过定位到cacerts.jks文件并使用keytool命令来查找和删除过期的GTE CyberTrust Root 5证书。

from: http://www.adam-bien.com/roller/abien/entry/how_to_fix_expired_certificate

The following error:

com.sun.enterprise.security.ssl.impl.SecuritySupportImpl checkCertificateDates
SEVERE: SEC5054: Certificate has expired: [
[
Version: V3
Subject: CN=GTE CyberTrust Root 5, OU="GTE CyberTrust Solutions, Inc.", O=GTE Corporation, C=US
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

Key: Sun RSA public key, 2048 bits

Is caused by certificate expiration in the keystore file: cacerts.jks. The cacerts.jks file usually resides in the folder: [GLASSFISH_HOME]/glassfish4/glassfish/domains/[DOMAIN_NAME]/config. With embedded GlassFish the certificate is extracted into the folder [USER]/.glassfishv3-arquillian[...]/config.

Copy the keystore file cacerts.jks into src/test/resources/config and mvm clean install you project.

To find if the ca is included in cacerts.jks, just use the following command,

then find get the alias: gtecybertrust5ca.

C:\Java\glassfish4\glassfish\domains\domain1\config>keytool -list -v -keystore cacerts.jks
 -storepass changeit|find "CN=GTE CyberTrust Root 5"

In case the keystore file also contains the expired certificate, simply delete the affected certificate:

keytool -delete -keystore ./cacerts.jks -alias gtecybertrust5ca
Password: changeit