Installing the Self-Signed Certificate Fails

Product version: 9.3

Last modified: 10 March 2020

Problem

After installing a self-signed certificate using the SSL certificate installation feature, the following error appears:

Unable to find valid certification path to requested target.

Solution

Follow the steps below to import the certificates to Java used by NAKIVO Backup & Replication:

1. List all certificates from the Director using the following command line prompt:

   openssl s_client -showcerts -connect localhost:4443
   

2. Create root.crt and intermediate.crt files with the output content received in the previous step.
   

   -----BEGIN CERTIFICATE-----

   MIICmzCCAYMCBgFwgG9nnjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZOQUtJ

   Vk8wHhcNMjAwMjI2MDczNzI5WhcNNDAwMjI2MDczOTA5WjARMQ8wDQYDVQQDDAZO

   ...

   -----END CERTIFICATE-----

3. Import root and intermediate certificates to the trusted root certificate of JAVA using the following command line:

   /opt/nakivo/director/jre/bin/keytool -importcert -keystore /opt/nakivo/director/jre/lib/security/cacerts -storepass changeit -file ./root.crt -alias "tsc-root"/opt/nakivo/director/jre/bin/keytool -importcert -keystore /opt/nakivo/director/jre/lib/security/cacerts -storepass changeit -file ./intermediate.crt -alias "tsc-inter"