Import the Let’s Encrypt Authority X3 in JAVA keystore
1. Target audience
- Users who run qbase+ 3.2 on
- Windows 7 or above
- Mac OS X 10.8.3 - 10.14 (10.15 or higher is not supported)
2. Problem
You're unable to login to qbase+ due to an Error checking login message.
3. Solution
Until there is a new version of qbase+ you'll need to add a Root Certificate to the Java keystore that comes with qbase+.
Note: For this solution to be implemented, you will need administrator privileges on your computer. If you are not a system admininstrator ask your IT department to implement the solution for you.
3.1 Windows users
- Download the ISRG Root X1 Cross-signed by DST Root CA X3 certificate here
- Start Windows Powershell as admin (how-to)
- Navigate to the Java directory of your qbase+ installation. By default this is C:\Program Files\qbase+\jre. You can navigate there by entering the command below
cd 'C:\Program Files\qbase+\jre\'
- Navigate to the \lib\security subdirectory by entering the command below
cd .\lib\security\
- Run keytool to import the certificate (Replace AliasName and path\to\certificate.der respectively) by entering the command below
..\..\bin\keytool -import -trustcacerts -keystore cacerts -storepass changeit -noprompt -alias AliasName -file path\to\certificate.der
Example..\..\bin\keytool -import -trustcacerts -keystore cacerts -storepass changeit -noprompt -alias WHL -file 'C:\Users\WHL\Downloads\isrg-root-x1-cross-signed.der'
- Note: AliasName can be any alphanumeric string of characters; do not use special characters such as spaces, dashes, slashes, ...
- Note: path\to\certificate.der by default will look like this: 'C:\Users\MyUserName\Downloads\isrg-root-x1-cross-signed.der' (Including the quotation marks! " ' " ) (replacing MyUserName with your computers login name.)
3.2 Mac OSX users
- Download the ISRG Root X1 Cross-signed by DST Root CA X3 certificate here
- Start the terminal application (how-to)
- Navigate to the Java directory of your qbase+ installation. By default this is Volumes/Macintosh\ HD/Applications/qbase+\ 3.2.app/Contents/Resources/jre/. You can navigate there by entering the three commands below consecutively.
cd ..
Navigate to the /Contents/Home/lib/security/ subdirectory. You can navigate there by entering the command below
cd ..
cd Volumes/Macintosh\ HD/Applications/qbase+\ 3.2.app/Contents/Resources/jre/cd /Contents/Home/lib/security/
- Run keytool to import the certificate (Replace AliasName and path\to\certificate.der respectively) by entering the command below.
sudo keytool -import -alias AliasName -keystore cacerts -file /Users/MyUserName/Downloads/isrg-root-x1-cross-signed.der
Example
sudo keytool -import -alias qbp -keystore cacerts -file /Users/RVK/Downloads/isrg-root-x1-cross-signed.der
- Note: AliasName can be any alphanumeric string of characters; do not use special characters such as spaces, dashes, slashes, ...
- Note: path\to\certificate.der by default will look like this: Users\MyUserName\Downloads\isrg-root-x1-cross-signed.der (replacing MyUserName with your computers login name.)
- After you press enter, the terminal will ask for your computer's password; enter it and press enter. You will not see it be entered, this is normal.
- When it asks for the keystore password, enter "changeit" (Without quotes).
- Whenever the terminal asks for confirmation, type "yes" (Without quotes) and press enter.
- A message should appear telling you the certificate was added to the keystore, without further errors.
You can now open the qbase+ app and login as usual.