Import the Let’s Encrypt Authority X3 in JAVA keystore

1. Target audience

  • Users who run qbase+ 3.2 on
    • Windows 7 or above
    • Mac OS X 10.8.3 - 10.14  (10.15 or higher is not supported)

2. Problem

You're unable to login to qbase+ due to an Error checking login message.

 

3. Solution

Until there is a new version of qbase+ you'll need to add a Root Certificate to the Java keystore that comes with qbase+. 

Note: For this solution to be implemented, you will need administrator privileges on your computer. If you are not a system admininstrator ask your IT department to implement the solution for you.

 

3.1 Windows users

  • Download the ISRG Root X1 Cross-signed by DST Root CA X3 certificate here
  • Start Windows Powershell as admin (how-to)
  • Navigate to the Java directory of your qbase+ installation. By default this is C:\Program Files\qbase+\jre. You can navigate there by entering the command below
    cd 'C:\Program Files\qbase+\jre\'
  •  Navigate to the \lib\security subdirectory by entering the command below
    cd .\lib\security\
  • Run keytool to import the certificate (Replace AliasName and path\to\certificate.der respectively) by entering the command below
    ..\..\bin\keytool -import -trustcacerts -keystore cacerts -storepass changeit -noprompt -alias AliasName -file path\to\certificate.der
    Example
    ..\..\bin\keytool -import -trustcacerts -keystore cacerts -storepass changeit -noprompt -alias WHL -file 'C:\Users\WHL\Downloads\isrg-root-x1-cross-signed.der'
  • Note: AliasName can be any alphanumeric string of characters; do not use special characters such as spaces, dashes, slashes, ...
  • Note: path\to\certificate.der by default will look like this: 'C:\Users\MyUserName\Downloads\isrg-root-x1-cross-signed.der' (Including the quotation marks! " ' " ) (replacing MyUserName with your computers login name.)

 

3.2 Mac OSX users

  • Download the ISRG Root X1 Cross-signed by DST Root CA X3 certificate here
  • Start the terminal application (how-to)
  • Navigate to the Java directory of your qbase+ installation. By default this is Volumes/Macintosh\ HD/Applications/qbase+\ 3.2.app/Contents/Resources/jre/. You can navigate there by entering the three commands below consecutively.
    cd ..

    cd ..

    cd Volumes/Macintosh\ HD/Applications/qbase+\ 3.2.app/Contents/Resources/jre/

    Navigate to the /Contents/Home/lib/security/ subdirectory. You can navigate there by entering the command below
    cd /Contents/Home/lib/security/
  • Run keytool to import the certificate (Replace AliasName and path\to\certificate.der respectively) by entering the command below.  
    sudo keytool -import -alias AliasName -keystore cacerts -file /Users/MyUserName/Downloads/isrg-root-x1-cross-signed.der
    Example
    sudo keytool -import -alias qbp -keystore cacerts -file /Users/RVK/Downloads/isrg-root-x1-cross-signed.der
  • Note: AliasName can be any alphanumeric string of characters; do not use special characters such as spaces, dashes, slashes, ...
  • Note: path\to\certificate.der by default will look like this: Users\MyUserName\Downloads\isrg-root-x1-cross-signed.der (replacing MyUserName with your computers login name.)

  • After you press enter, the terminal will ask for your computer's password; enter it and press enter.  You will not see it be entered, this is normal.
  • When it asks for the keystore password, enter "changeit" (Without quotes).
  • Whenever the terminal asks for confirmation, type "yes"  (Without quotes) and press enter.
  • A message should appear telling you the certificate was added to the keystore, without further errors.

You can now open the qbase+ app and login as usual.