How to reset the TrustStore in AEM?

Last update: Tue Nov 21 2023 00:00:00 GMT+0000 (Coordinated Universal Time)

To fix the TrustStore errors, you need to recreate TrustStore.

Description description

Environment

Experience Manager

Issue/Sy mptoms

Unable to retrieve TrustStore errors as seen in the log.

> 04.04.2017 11:39:30.150 *ERROR* [ 192.150.9.201 [ 1491320370146] GET /libs/granite/security/truststore .json HTTP /1

.1] com.adobe.granite.security.user.internal.servlets.KeyStoreManagingServlet Unable to retrieve the truststore's aliases.

>
> java.lang.SecurityException: com.adobe.granite.crypto.CryptoException: Cannot convert byte data
>
>      at com.adobe.granite.keystore.internal.KeyStoreServiceImpl.extractStorePassword(KeyStoreServiceImpl.java:609)
>
>      at com.adobe.granite.keystore.internal.KeyStoreServiceImpl.internalGetTrustStore(KeyStoreServiceImpl.java:462)
>
>      at com.adobe.granite.keystore.internal.KeyStoreServiceImpl.getTrustStore(KeyStoreServiceImpl.java:154)
>
>      at com.adobe.granite.security.user.internal.servlets.KeyStoreManagingServlet.doGet(KeyStoreManagingServlet.java:154)
>
>      at org.apache.sling.api.servlets.SlingSafeMethodsServlet.mayService(SlingSafeMethodsServlet.java:269)
>
>      ...
>
>      at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
>
>      at java.lang.Thread.run(Thread.java:745)
>
> Caused by: com.adobe.granite.crypto.CryptoException: Cannot convert byte data
>
>      at com.adobe.granite.crypto.internal.CryptoSupportImpl.unprotect(CryptoSupportImpl.java:160)
>
>      at com.adobe.granite.keystore.internal.KeyStoreServiceImpl.extractStorePassword(KeyStoreServiceImpl.java:601)
>
>      ... 110 common frames omitted
>
> Caused by: com.adobe.granite.crypto.CryptoException: Failed decrypting cipher text
>
>      at com.adobe.granite.crypto.internal.CryptoSupportImpl.decrypt(CryptoSupportImpl.java:96)
>
>      at com.adobe.granite.crypto.internal.CryptoSupportImpl.unprotect(CryptoSupportImpl.java:157)
>
>      ... 111 common frames omitted
>
> Caused by: com.rsa.jsafe.JSAFE_PaddingException: Invalid padding.
>
>      at com.rsa.jsafe.JSAFE_SymmetricCipher.decryptFinal(Unknown Source)
>
>      at com.adobe.granite.crypto.internal.jsafe.JSafeCryptoSupport.getPlainText(JSafeCryptoSupport.java:325)
>
>      at com.adobe.granite.crypto.internal.jsafe.JSafeCryptoSupport.getPlainText(JSafeCryptoSupport.java:307)
>
>      at com.adobe.granite.crypto.internal.CryptoSupportImpl.decrypt(CryptoSupportImpl.java:94)
>
>      ... 112 common frames omitted

Resolution resolution

Follow the below steps:

Open CRX/DE as an admin user.
Delete the node /etc/truststore/truststore.p12.
Click Save All.
Recreate the truststore as per instructions below:

AEM 6.4

AEM 6.5
Cause
Corruption in the TrustStore.

recommendation-more-help

3d58f420-19b5-47a0-a122-5c9dab55ec7f