[DIRSERVER-2209] SSL handshake fails when server uses an PKCS12 keystore

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 2.0.0-M23, 2.0.0-M24
• Component/s: network
• Environment: OS:; Windows 7 Professional 64 Bit; JRE:; jre1.8.0_144; Test-Client:; Apache Directory Studio 2.0.0.v20150606-M9
• Assignee: Unassigned
• Reporter: Mareike Täubner
• Created: 07/Sep/17 14:35
• Updated: 28/Jun/19 06:37

Description

I am using the apache directory server library (or.apache.directory.server.apacheds-all 2.0.0-M23) to run a simple LDAP instance. As I was implementing an LDAPS connection I got stuck with the following issue:

When setting the keystore file in the LdapServer object, it makes a difference whether it is an JKS or PKCS12 keystore. Using the JKS the client can successfully connect via LDAPS. With the PKCS12 the client can't connect because the SSL handshake fails.

I have added a minimal example project that reproduces the issue.