Installing the Self-Signed Certificate Fails

Product Version: 9.3

Last Modified: 10 March 2020

Problem

After installing a self-signed certificate using the SSL certificate installation feature, the following error appears:

Unable to find valid certification path to requested target

Solution

Follow the steps below to import the certificates to Java used by NAKIVO Backup & Replication:

1. List all certificates from the Director using the following command line:
   

   openssl s_client -showcerts -connect localhost:4443

2. Create root.crt and intermediate.crt files with the output content received in the previous step.
   

   -----BEGIN CERTIFICATE-----
   
   MIICmzCCAYMCBgFwgG9nnjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZOQUtJ
   
   Vk8wHhcNMjAwMjI2MDczNzI5WhcNNDAwMjI2MDczOTA5WjARMQ8wDQYDVQQDDAZO
   
   ...
   
   -----END CERTIFICATE-----

3. Import root and intermediate certificates to the trusted root certificate of JAVA using the following command line:
   

   /opt/nakivo/director/jre/bin/keytool -importcert -keystore /opt/nakivo/director/jre/lib/security/cacerts -storepass changeit -file ./root.crt -alias "tsc-root"
   
   /opt/nakivo/director/jre/bin/keytool -importcert -keystore /opt/nakivo/director/jre/lib/security/cacerts -storepass changeit -file ./intermediate.crt -alias "tsc-inter"