Import the Let’s Encrypt Authority X3 in JAVA keystore

1. Target audience

  • Users who run qbase+ 3.2 on
    • Windows 7 or above
    • Mac OS X 10.8.3 - 10.14  (10.15 or higher is not supported)

2. Problem

You're unable to login to qbase+ due to an Error checking login message.

 

3. Solution

Until there is a new version of qbase+ you'll need to add a Root Certificate to the Java keystore that comes with qbase+. 

3.1 Windows users

  • Download the ISRG Root X1 Cross-signed by DST Root CA X3 certificate here
  • Start Windows Powershell as admin (how-to)
  • Navigate to the Java directory of your qbase+ installation. By default this is C:\Program Files\qbase+\jre. You can navigate there by entering the command below 
    cd 'C:\Program Files\qbase+\jre\'
  •  Navigate to the \lib\security subdirectory by entering the command below 
    cd .\lib\security\
  • Run keytool to import the certificate (Replace AliasName and path\to\certificate.der respectively) by entering the command below 
    ..\..\bin\keytool -import -trustcacerts -keystore cacerts -storepass changeit -noprompt -alias AliasName -file path\to\certificate.der
    Example

     C:\Program Files\qbase+\jre\lib\security> ..\..\bin\keytool -import -trustcacerts -keystore cacerts -storepass changeit -noprompt -alias WHL -file 'C:\Users\WHL\Downloads\isrg-root-x1-cross-signed.der'

3.2 Mac OSX users

  • Download the ISRG Root X1 Cross-signed by DST Root CA X3 certificate here
  • Start the terminal application (how-to)
  • Navigate to the Java directory of your qbase+ installation. By default this is Volumes/Macintosh\ HD/Applications/qbase+\ 3.2.app/Contents/Resources/jre/. You can navigate there by entering the commands below  
    cd ..
    cd ..
    cd Volumes/Macintosh\ HD/Applications/qbase+\ 3.2.app/Contents/Resources/jre/

    Navigate to the /Contents/Home/lib/security/ subdirectory. You can navigate there by entering the command below 
    cd /Contents/Home/lib/security/
  • Run keytool to import the certificate (Replace the path\to\isrg-root-x1-cross-signed.der respectively) by entering the command below.   
    sudo keytool -import -alias qbp -keystore cacerts -file /Users/MyUserName/Downloads/isrg-root-x1-cross-signed.der
    Example

    sudo keytool -import -alias qbp -keystore Volumes/Macintosh\ HD/Applications/qbase+\ 3.2.app/Contents/Resources/jre/Contents/Home/lib/security/cacerts -file /Users/RVK/Downloads/isrg-root-x1-cross-signed.der

     

Related articles