This is true. Since SG 6.x PEM certificates are the preferred way of configuration, so the TLS Tool does not support JKS. We will add the extended error message to the back log.
For troubleshooting TLS problems have a look at:
For JKS we usually recommend the Keystore Explorer Tool:
This is a GUI for the Java keytool command and makes it quite easy to check the contents of keystores.
···
On Thursday, June 28, 2018 at 3:28:41 PM UTC+2, Torsten Reinhard wrote:
Hi,
for diagnosting TLS errors I´ve tested “sgtlsdiag.sh” using the command
thanx for your reply and for adding this to the backlog. A little bit more output would be helpful, especially when nothing was evaluated, or if the current config is not supported.
We will check, if we can easily switch from our *.jks based setup to the PEM based setup.
For the *.jks setup I´m already using the mentioned keystore Tool - but running into a problem I mentioned at Redirecting to Google Groups
Maybe you can have a look at this, too?
Thanx a lot !
Torsten
···
Am Freitag, 29. Juni 2018 10:07:24 UTC+2 schrieb Jochen Kressin:
This is true. Since SG 6.x PEM certificates are the preferred way of configuration, so the TLS Tool does not support JKS. We will add the extended error message to the back log.