Installing the Self-Signed Certificate Fails

Product version: 9.3

Last modified: 10 March 2020

Problem

After installing a self-signed certificate using the SSL certificate installation feature, the following error appears:

Unable to find valid certification path to requested target.

Solution

Follow the steps below to import the certificates to Java used by NAKIVO Backup & Replication:

  1. List all certificates from the Director using the following command line prompt:

    openssl s_client -showcerts -connect localhost:4443

  2. Create root.crt and intermediate.crt files with the output content received in the previous step.

    -----BEGIN CERTIFICATE-----

    MIICmzCCAYMCBgFwgG9nnjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZOQUtJ

    Vk8wHhcNMjAwMjI2MDczNzI5WhcNNDAwMjI2MDczOTA5WjARMQ8wDQYDVQQDDAZO

    ...

    -----END CERTIFICATE-----

  3. Import root and intermediate certificates to the trusted root certificate of JAVA using the following command line:

    /opt/nakivo/director/jre/bin/keytool -importcert -keystore /opt/nakivo/director/jre/lib/security/cacerts -storepass changeit -file ./root.crt -alias "tsc-root"/opt/nakivo/director/jre/bin/keytool -importcert -keystore /opt/nakivo/director/jre/lib/security/cacerts -storepass changeit -file ./intermediate.crt -alias "tsc-inter"