It seems that it has nothing to do with the keystore itself, but with the casmanagement properties to set the password. If I replace the default keystore and make soure that my keystore uses the default tomcat password (changeit) it works!
In the end I deceided to deploy the war on a separate tomcat9 server, and than there are no issues either. On Fri, Jul 22, 2022 at 3:18 PM King, Robert <r...@mun.ca> wrote: > and the article link …..ooops sorry > > > > > https://objectpartners.com/2018/07/19/spring-boot-ssl-and-badpaddingexception/ > > > > > > *From:* cas-user@apereo.org <cas-user@apereo.org> *On Behalf Of *King, > Robert > *Sent:* Friday, July 22, 2022 10:47 AM > *To:* cas-user@apereo.org > *Subject:* RE: [EXTERNAL SENDER] [cas-user] Using Let's Encrypt for SSL > certificate for CAS and CAS management > > > > I have run into a similar issue and it seems to always stem from using > openssl to covert a pem/x509 cert and private key into a pkcs12 bundle. > Was not able to find a solution. > > > > This article looks like it might work, but I did not have time to test it > yet. > > > > *From:* cas-user@apereo.org <cas-user@apereo.org> *On Behalf Of *Tom > Reijnders > *Sent:* Thursday, July 21, 2022 11:57 AM > *To:* CAS Community <cas-user@apereo.org> > *Subject:* [EXTERNAL SENDER] [cas-user] Using Let's Encrypt for SSL > certificate for CAS and CAS management > > > > I used several methods to convert the Let's Encrypt certificatate to a > PKCS12 certificate (inlcuding the key) but whatever I try, I get the > follwing error when trying to start cas-management: > > > > java.security.UnrecoverableKeyException: Get Key failed: Given final block > not properly padded. Such issues can arise if a bad key is used during > decryption. > > > > Any ideas how to fix this? > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+unsubscr...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/2ecd0820-ae3e-43f8-8549-2e01990567cbn%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/2ecd0820-ae3e-43f8-8549-2e01990567cbn%40apereo.org?utm_medium=email&utm_source=footer> > . > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+unsubscr...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/5fb2af410e10427c882e26e9201f366f%40mun.ca > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/5fb2af410e10427c882e26e9201f366f%40mun.ca?utm_medium=email&utm_source=footer> > . > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+unsubscr...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/aa582939a6cf40dc811ed9d46932a659%40mun.ca > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/aa582939a6cf40dc811ed9d46932a659%40mun.ca?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAEKnHSRbusdhJ6JiD5VgzmB%2B6a6CjY8MNsjgOaFOLpmk_PweSA%40mail.gmail.com.
