java.security.spec.InvalidKeySpecException: Neither RSA, DSA nor EC worked

Graylog Central (peer support)
1

Hi,

I’ve renewed a wild card cert and now I get this error with my graylog server not starting up.

I’m on version 2.5.xxx.
The old key still works but obviosuly its expired so comes up as not secure.There is read permissions for the graylog user on the key file.
Did a cert check,
openssl rsa -in mycert.key -check
I did this on the old and new one and both returned as RSA and ok.
My key and pem bundled file work fine elsewhere where I use it, just not on Graylog.
Here is my java version details,
openjdk version “1.8.0_232”
OpenJDK Runtime Environment (build 1.8.0_232-b09)

I haven’t imported the key into the java keystore as its not a self signed cert, do I still need to do this?
Anyone have any ideas please?
Really stuck.

2

How did you created certificate? Did you changed private key file, or only generate new certificate (extend period) in renewal task?

Check if your certificate file contains intermediate + certificate concatenated in one file.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.