"parseAlgParameters failed: PBE AlgorithmParameters not available" when running keytool on RHEL in FIPS mode
Issue
- Getting the following error running
keytool
on RHEL in FIPS mode:
# keytool -importkeystore -srckeystore mykeystore.p12 -srcstoretype pkcs12 -srcstorepass mysrcpass -srcalias myalias -destkeystore mykeystore.jks —deststoretype ks —deststorepass mydestpass -destalias myalias -v
Importing keystore mykeystore.pl2 to mykeystore.jks.
keytool error: java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available
java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available
at java.base/sun.security.pkcsl2.PRCS12KeyStore.parseAlgParameters (PKCS12KeyStore. java:839)
at java.base/sun.security.pkcsl2. PKCS12KeyStore. engineLoad (PKCS12KeyStore. java:2074)
at java.base/sun.security.util.KeyStoreDelegator.engineLoad (KeyStoreDelegator. java:222)
at java.base/java.security.KeyStore.load (KeyStore.Jjava:1479)
at java.base/sun.security.tools.keytool.Main.loadSourceKeyStore (Main.java:2260)
at java.base/sun.security.tools.keytool.Main.doCommands (Main. java:1223)
at java.base/sun.security.tools.keytool.Main. run (Main.java:412)
at java.base/sun.security.tools.keytool.Main.main (Main.java:405)
Caused by: java.security.NoSuchAlgorithmException: PBE AlgorithmParameters not available
at java.base/sun.security.jca.GetInstance.getInstance (GetInstance.java:158)
at java.base/java.security.Security.gecImpl (Security.java:740)
at java.base/java.security.AlgorithmParameters.getInstance (AlgorithnParameters. java:158)
at java.base/sun.security.pkcsl2.PKCS12KeyStore.parseAlgParameters (PKCS12KeyStore. java:833)
Environment
- Red Hat Enterprise Linux (RHEL) 8
- Red Hat build of OpenJDK
- FIPS mode enabled
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.