search

kaikramer / keystore-explorer

KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner.
https://keystore-explorer.org/
GNU General Public License v3.0
1.61k stars 265 forks source link

Unable to Recreate Expired Certificates #502

Closed dschultz512 closed 1 week ago

dschultz512 commented 1 week ago

Describe the bug I have several certificates that have expired. I am able to delete them and create a new ones. But the updated certificate does not save to the keystore. When I create another certificate or re-open the keystone, the old expired certificate is shown.

To Reproduce Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior A clear and concise description of what you expected to happen.

Screenshots Newly created certificate

Screenshot 2024-06-17 at 8 59 07 AM

After closing and reopening keystore showing expire certificate

Screenshot 2024-06-17 at 9 00 22 AM

Environment

kaikramer commented 1 week ago

Unfortunately I cannot reproduce this issue. Please provide more information:

  1. What keystore type?
  2. How many certiifcates are in the keystore?
  3. How was the original keystore created? With KSE or another tool?
dschultz512 commented 1 week ago

Kai,

Thank you for the email.

  1. PCKS #12
  2. 14
  3. Keystore and all certificates were created with KSE

As I have looked into the issue, it appears it is related to an expired intermediate certificate. Please see attached. I have created a new Intermediate CA and using it to create new certificates.

kaikramer commented 1 week ago

This was GitHub sending you my comment as an email. Please be aware that your response email was automatically published here.

Also, the attached screenshot has unfortunately been filtered out by GitHub.

dschultz512 commented 1 week ago

Apologies. Screen shot below with expired intermediate certificate. And to clarify, I created the new Intermediate CA several months ago.

dschultz512 commented 1 week ago

It appears I resolved the issue. There were several certificates in the KS that were using the expired Intermediate CA. Once I deleted them, I was able to create and save certificates. Thank you for your help.

kaikramer commented 1 week ago

It appears I resolved the issue. There were several certificates in the KS that were using the expired Intermediate CA. Once I deleted them, I was able to create and save certificates.

Good to hear that you could find a solution. The code that handles these things is in the JRE not in KSE, so there is nothing I can do about it anyway.