java.security.cert.CertificateException: java.io.EOFException

tomcat@xxx $ keytool -import -trustcacerts -file cert_xxxx.pem -alias login.example.nl  -keystore ssl.keystore
Enter keystore password:  xxx
keytool error: java.security.cert.CertificateException: java.io.EOFException

After opening the pem file we saw a strange “enter” after the END CERTIFICATE.

—–END CERTIFICATE—–

~

After removing this obsolete “enter” line the import went well.

—–END CERTIFICATE—–
~

How to renew a Certificate in Oracle Wallet Manager

Open your Wallet Manager from your commandline using $ORACLE_HOME/bin/owm ( set your DISPLAY to the correct value )

Once started open your ewallet.p12 file which most likely can be found at the default location :

/etc/ORACLE/WALLETS/oracle

Enter your Wallet Password.

Select the Certificate which will expire.

Go to Operations -> Export Certificate Request.

Save this file to server in the default location

Send the Certificate request to your CA Authority.
When a new certificate is recieved continue by removing the existing user certificate ;

Select the Certificate which will expire and select OPERATIONS -> REMOVE USER CERTIFICATE

Confirm this with “Yes”

As showed below , your initail request is turning up again and is ready to receive a new certificate.

Select Operations – > Import User Certificate

Select your location

Now the result is again an up to date certificate in the Oracle Wallet.

Remember , for the certificatie to take effect it is required to restart Oracle depending services like Portal !