I have spent hours fighting with installing certificates into OpenFire - IT DOES NOT WORK! Does anyone have *WORKING* instructions for installing a CA certificate, and a key & cerificate into an OpenFire server? I've been over the OpenFire SSL guide and numerous other sites and I always end up with OpenFire clients complaining about a self-signed cert (of which there is none) or the &*@^*&$*&@ useless "supplied key (null) is not a RSAPrivateKey instance" error when I click on Server / Server Settings / Server Certificates.
The procedure I had the most confidence in, but did not work, was:
--- verify keystore is empty ----
tun # jre/bin/keytool -keystore ./resources/security/keystore -list
--- import CA certificate ----
tun # jre/bin/keytool -keystore ./resources/security/keystore -import -alias cacert -file /tmp/cacert.pem
--- Generate a key ----
tun # jre/bin/keytool -keystore ./resources/security/keystore -genkey -alias mormail-rsa -keyalg RSA
--- Export the key ----
tun # jre/bin/keytool -keystore ./resources/security/keystore -alias mormail-rsa -certreq -file mormail-rsa.csr
--- Move the CSR to the signing machine ---
tun # scp mormail-rsa.csr awilliam@192.168.1.122:Documents/Organizations/MI/SSL/
---- Sign the cerification ----
$ openssl ca -policy policy_anything -days 730 -in mormail-rsa.csr -out mormail-rsa.cert
---- Convert to DER ----
$ openssl x509 -in mormail-rsa.cert -inform PEM -out mormail-rsa.cert.der -outform DER
---- Move the certificate back to the openfire server ----
$ scp mormail-rsa.cert.der root@tun.mormail.com:/tmp
---- Import the certificate ---
tun # /gre/bin/keytool -import -keystore ./resources/security/keystore \
-alias mormail-rsa -file /tmp/mormail-rsa.cert.der \
-keyalg RSA
And I'm right back to the &*@^*&$*&@ "supplied key (null) is not a RSAPrivateKey instance" error message.