SEVERE: Failed to load keystore type JKS with path webapps/FT.keystore due to signed overrun, bytes = 128 on TomCat 6 startup

Question

I am trying to configure Tomcat so as to accept HTTPS requests. The problem is that when I start Tomcat, I have the following exception :

SEVERE: Failed to load keystore type JKS with path webapps/FT.keystore due to signed overrun, bytes = 128

I have already created the keystore FT.keystore and placed it in webapps/ directory.

Here is the configuration I use for the HTTPS connector (The xxx are only to keep informations private)

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
    maxThreads="150" scheme="https" secure="true"
        keystoreFile="webapps/xxx.keystore" keystorePass="xxxx"
    clientAuth="false" sslProtocol="TLS" />

Could any one help me solve this problem? I used keytool ($JAVA_HOME/bin) to generate my keystore and the RSA algorithm. Thanks a lot.

Answer 1

Your connector configuration looks good, so I suspect there's something wrong with the generated keystore. Are you sure you generated it as instructed in Tomcat 6 SSL Configuration HOW-TO? The command should look like this:

%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA

(Pay attention to the -alias tomcat parameter - I found some references which indicate that leaving it out would cause the "signed overrun" problem you're having.)