Installing the Self-Signed Certificate Fails
Product version: 9.3
Last modified: 10 March 2020
Problem
After installing a self-signed certificate using the SSL certificate installation feature, the following error appears:
Unable to find valid certification path to requested target.
Solution
Follow the steps below to import the certificates to Java used by NAKIVO Backup & Replication:
-
List all certificates from the Director using the following command line prompt:
openssl s_client -showcerts -connect localhost:4443
-
Create
root.crt
andintermediate.crt
files with the output content received in the previous step.-----BEGIN CERTIFICATE-----
MIICmzCCAYMCBgFwgG9nnjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZOQUtJ
Vk8wHhcNMjAwMjI2MDczNzI5WhcNNDAwMjI2MDczOTA5WjARMQ8wDQYDVQQDDAZO
...
-----END CERTIFICATE-----
-
Import root and intermediate certificates to the trusted root certificate of JAVA using the following command line:
/opt/nakivo/director/jre/bin/keytool -importcert -keystore /opt/nakivo/director/jre/lib/security/cacerts -storepass changeit -file ./root.crt -alias "tsc-root"/opt/nakivo/director/jre/bin/keytool -importcert -keystore /opt/nakivo/director/jre/lib/security/cacerts -storepass changeit -file ./intermediate.crt -alias "tsc-inter"