Support Article
WS-Security - Can't Open Keystore
SA-120
Summary
When invoking a SOAP service that has WS-Security policy with signature security added and a PFX keystore is used, PRPC throws an error: "Couldn't Load the Keystore"
Error Messages
2014-06-30 17:44:37,294 [ WebContainer : 5] [ STANDARD] [ ] ( pegarules.pub.PRException) INFO <HOST_NAME> - exception thrown when thread is null: Couldn't Load the keystore
2014-06-30 17:44:37,297 [ WebContainer : 5] [ STANDARD] [ ] ( services.soap.SOAPService) ERROR <HOST_NAME> - Exception while authenticating the service request com.sun.xml.wss.XWSSecurityException: com.pega.pegarules.pub.PRRuntimeException: Couldn't Load the keystore
SoapUI Response:
<soap:Fault>
<faultcode>wsse:FailedAuthentication</faultcode>
<faultstring>com.pega.pegarules.pub.PRRuntimeException: Couldn't Load the keystore</faultstring>
</soap:Fault>
Steps to Reproduce
Invoking a SOAP service in PRPC that has WS-Security with a PFX keystore from SoapUI
Root Cause
PRPC does not support PFX keystore type
Resolution
Converting the PFX keystore to a JKS keystore
Published February 17, 2016 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.