Common Problems and Solutions

1. Missing java keystore and public key in keys/ directory

If the only file in the keys/ directory of your ICA/MUA/Web is authorised-keys.jks, then the automatic key generation has failed and you will need to perform this manually.

• On Linux
  • For the ICA:

    # keytool -genkey -alias raptorica -keystore /opt/raptor/ica/keys/raptor-ica.jks -storepass changeit -keypass changeit -dname "CN=`hostname -f `,ou=ICA,o=Raptor" -validity 7300 -keyalg RSA -keysize 2048
    # keytool -export -alias raptorica -keystore /opt/raptor/ica/keys/raptor-ica.jks -storepass changeit -file /opt/raptor/ica/keys/raptor-ica-public.crt
    

  • For the MUA:

    # keytool -genkey -alias raptormua -keystore /opt/raptor/mua/keys/raptor-mua.jks -storepass changeit -keypass changeit -dname "CN=`hostname -f `,ou=MUA,o=Raptor" -validity 7300 -keyalg RSA -keysize 2048
    # keytool -export -alias raptormua -keystore /opt/raptor/mua/keys/raptor-mua.jks -storepass changeit -file /opt/raptor/mua/keys/raptor-mua-public.crt
    

  • For the Web:

    # keytool -genkey -alias raptorweb -keystore /opt/raptor/web/keys/raptor-web -storepass changeit -keypass changeit -dname "CN=`hostname -f `,ou=WEB,o=Raptor" -validity 7300 -keyalg RSA -keysize 2048
    # keytool -export -alias raptorweb -keystore /opt/raptor/web/keys/raptor-web.jks -storepass changeit -file /opt/raptor/web/keys/raptor-web-public.crt