创建自签名证书命令异常记录

短命女 2021-12-21 05:43 1394阅读 0赞

### 一、 ###

**1.1.异常情况：unable to load Private Key  
6900:error:28078065:UI routines:UI\_set\_result\_ex:result too small:crypto\\ui\\ui\_lib.c:903:You must type in 4 to 1023 characters**

unable to load Private Key
    6900:error:28078065:UI routines:UI_set_result_ex:result too small:crypto\ui\ui_lib.c:903:You must type in 4 to 1023 characters
    6900:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:crypto\evp\evp_enc.c:570:
    6900:error:0906A065:PEM routines:PEM_do_header:bad decrypt:crypto\pem\pem_lib.c:461:

**1.2 异常原因：执行openssl rsa -passin pass:x -in server.pass.key -out server.key命令时，由于通过openssl genrsa -des3 -passout pass:x -out server.pass.key 2048命令生成server.pass.key文件时，设置的密码太短**

![20190628100525873.png][]

**1.3解决方案：删除掉原来命令生成的文件**

**1.3.1 修改命令中密码x为123456(长度为4-1023个字符)**

openssl genrsa -des3 -passout pass:123456 -out server.pass.key 2048
    openssl rsa -passin pass:123456 -in server.pass.key -out server.key

![20190628103032238.png][]

**1.3.2 直接使用 默认参数生成RSA私钥**

openssl genpkey -algorithm RSA -out server.key -pkeyopt rsa_keygen_bits:2048

![20190628105731865.png][]

**1.4 .参考网站：[https://www.openssl.org/docs/man1.1.0/man1/genpkey.html][https_www.openssl.org_docs_man1.1.0_man1_genpkey.html]**

**[https://bugzilla.redhat.com/show\_bug.cgi?id=1467669][https_bugzilla.redhat.com_show_bug.cgi_id_1467669]**

### **二、** ###

**2.1 异常情况：****keytool 错误: java.security.UnrecoverableKeyException: Cannot recover key**

**2.2 执行命令keytool -importkeystore -srckeystore mykeystore.jks -destkeystore mykeystore1.jks -deststoretype pkcs12时，由于设置的密码(storepass 和 keypass)不一致**

![20190628140156641.png][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70][]

**2.3 解决方案：将密码设置一致**

![20190628141835288.png][]

**2.4 参考网站：[https://stackoverflow.com/questions/4926290/java-keystore-and-password-settings][https_stackoverflow.com_questions_4926290_java-keystore-and-password-settings]**

[20190628100525873.png]: /images/20211220/f82e654a8072451fbe07e7c80622e1e4.png
[20190628103032238.png]: /images/20211220/ca99be47eb0a42daa5eaa73b1212af54.png
[20190628105731865.png]: /images/20211220/d81d454d9a344062ae1653012acef21e.png
[https_www.openssl.org_docs_man1.1.0_man1_genpkey.html]: https://www.openssl.org/docs/man1.1.0/man1/genpkey.html
[https_bugzilla.redhat.com_show_bug.cgi_id_1467669]: https://bugzilla.redhat.com/show_bug.cgi?id=1467669
[20190628140156641.png]: /images/20211220/abce472af1c847e49c7a33bbc7e939c9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70]: /images/20211220/1aeb3b55f26449698b495abbd6a66909.png
[20190628141835288.png]: /images/20211220/1e374d161fbc4157b96ea9e847af08ae.png
[https_stackoverflow.com_questions_4926290_java-keystore-and-password-settings]: https://stackoverflow.com/questions/4926290/java-keystore-and-password-settings