question

kimseng avatar image
kimseng asked Erick Ramirez answered

Unable to import the node's signed certificate into the node's keystore in DS210 SSL exercise 02.05

In this step of the exercise, i need to import the node's signed certificate into the node's keystore.

ubuntu@ds210-node1:~/keys$ keytool -keystore node3-serverkeystore.jks -alias node1 -import -file node3_cert_signed -keypass cassandra -storepass cassandra

Certificate was added to keystore

ubuntu@ds210-node1:~/keys$ keytool -keystore node1-serverkeystore.jks -alias node1 -import -file node1_cert_signed -keypass cassandra -storepass cassandra

keytool error: java.lang.Exception: Public keys in reply and keystore don't match

I do not understand why there is an error in node 1 import where the Public keys in reply and keystore don't match while there is no issue with node 3 import.

What is the error here?

ds210
10 |1000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

1 Answer

Erick Ramirez avatar image
Erick Ramirez answered

The error indicates that you can't import the certificate because it was generated with a different set of keys than what you are using.

The most common cause of this issue in the exercises is because you used node1 instead of node3 (or vice versa).

You'll need to retrace your steps and perhaps start again if you are unable to determine the point where you made the mistake. Cheers!

Share
10 |1000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.