KB Article #177266

Error while importing a valid p12 certificate

Problem

A valid .p12 certificate can not be imported in Interchange.

Extract of CN logs :
2015-07-21 16:53:47,246 - WARN [qtp225642419-2244] (X509CertPathValidatorImpl.checkSignature:320) - Unable to verify certificate's integrity:
Version: 3
...
...
...
java.security.SignatureException: The RSA public key is not valid: The RSA modulus is not an acceptable FIPS length. Lengths must be 1024, 2048 or 3072 bits
at com.entrust.toolkit.security.crypto.rsa.l.a(Unknown Source)
at com.entrust.toolkit.security.crypto.rsa.gb.engineVerifyUsingDigest(Unknown Source)
at com.entrust.toolkit.security.crypto.signature.DigitalSignatureWithSoftDigestImpl.engineVerify(Unknown Source)
at com.entrust.toolkit.security.crypto.signature.DigitalSignature.engineVerify(Unknown Source)
at java.security.Signature.verify(Unknown Source)
...
...
...

Resolution

You may disable key length verification in the following way :

1) Edit file "..\Interchange\conf\jvmArguments.xml"
2) Add under "<!-- Common to all nodes --> " the line :
<Property key="com.entrust.toolkit.security.crypto.rsa.enforceAllowedFIPSKeyLength">false</Property>
3) Restart Interchange
4) Certificate will now be imported successfully