Error loading certificate

Wowza Streaming Engine
1

I created self sign sslf with below command
keytool -genkey -keysize 2048 -alias wowza -keyalg RSA -keystore ssl.mycompany.com.jks

but enfine have a error when stream via ssl
CertificateUtilsloadCertificateX509[load]: : java.io.IOException: Invalid keystore format|at java.base/sun.security.provider.JavaKeyStore.engineLoad(Unknown Source)|at java.base/sun.security.util.KeyStoreDelegator.engineLoad(Unknown Source)|at java.base/java.security.KeyStore.load(Unknown Source)|at com.wowza.wms.util.CertificateUtils.loadCertificateX509(CertificateUtils.java:195)|at com.wowza.wms.util.CertificateUtils.loadCertificateX509(CertificateUtils.java:149)|at com.wowza.wms.webrtc.model.WebRTCContext.loadWebRTCSSLCertificates(WebRTCContext.java:266)|at com.wowza.wms.webrtc.model.WebRTCContext.init(WebRTCContext.java:180)|at com.wowza.wms.vhost.VHost.init(VHost.java:558)|at com.wowza.wms.vhost.VHostSingleton.init(VHostSingleton.java:62)|at com.wowza.wms.server.Server.startVHost(Server.java:3802)|at com.wowza.wms.server.Server.startVHosts(Server.java:4318)|at com.wowza.wms.server.Server.start(Server.java:1143)|at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)|at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

2

Hi,

It looks like there might be an issue with the format of the keystore file. When generating a self-signed SSL certificate using the keytool command, it’s important to ensure that the keystore format is compatible with what Wowza Streaming Engine expects.

Here are a few steps you can take to troubleshoot and potentially resolve the issue:

  1. Verify Keystore Format : Ensure that the keystore format is correct. Wowza Streaming Engine typically expects a Java KeyStore (JKS) format. You can check the format using the following command:
keytool -list -keystore ssl.mycompany.com.jks

If the keystore format is incorrect, you may need to recreate the keystore in the correct format.

  1. Recreate Keystore : If the keystore format is incorrect or if you suspect there may be an issue with the keystore, you can recreate it using the following command:
keytool -genkey -keysize 2048 -alias wowza -keyalg RSA -keystore ssl.mycompany.com.jks

Make sure to specify the correct alias ( wowza in this case) and keystore file name ( ssl.mycompany.com.jks ).

It has been a while. I am sure you might have been able to figure out the issue. If not and you still having issues you can submit a support ticket

1 Like