Error sending mail: Invalid keystore format

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

thenetstriker

I've configured my Alfresco (5.0.c) installation to send mails over smtp.office365.com, but I get errors regarding the java keystore.

The exception is very long, so I've uploaded it to pastebin: http://pastebin.com/bfX64aVF

At the bottom of the exception is the interesting part:

Caused by: java.io.IOException: Invalid keystore format
   at sun.security.provider.JavaKeyStore.engineLoad(Unknown Source)
   at sun.security.provider.JavaKeyStore$JKS.engineLoad(Unknown Source)
   at java.security.KeyStore.load(Unknown Source)
   at sun.security.ssl.TrustManagerFactoryImpl.getCacertsKeyStore(Unknown Source)
   at sun.security.ssl.SSLContextImpl$DefaultSSLContext.getDefaultTrustManager(Unknown Source)
   at sun.security.ssl.SSLContextImpl$DefaultSSLContext.<init>(Unknown Source)
   at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
   at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
   at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
   at java.lang.reflect.Constructor.newInstance(Unknown Source)
   … 117 more

My cacerts keystore is in JCEKS format. I think for some reason Alfresco tries to load the keystore in a different format.
I've already tried to set the JAVA_OPTS in setenv.sh, but that didn't make any difference:
JAVA_OPTS="-Djavax.net.ssl.keyStoreType=JCEKS $JAVA_OPTS "

How can I solve this problem?

zydoon

First you'll need to import the SMTP TLS certificate into the "truststore"
second, you tell tomcat what is the store type and it's path
in RHEL installation: /etc/sysconfig/tomcat

JAVA_OPTS="…some..staff…. -Djavax.net.ssl.trustStore=/var/lib/alfresco/keystore/ssl.truststore -Djavax.net.ssl.trustStoreType=JCEKS -Djavax.net.ssl.trustStorePassword=some_password …..something..else…  "‍

I do have this in alfresco-global.properties

alfresco.encryption.ssl.keystore.location=${dir.keystore}/ssl.keystore
alfresco.encryption.ssl.keystore.provider=SunJCE
alfresco.encryption.ssl.keystore.type=JCEKS
alfresco.encryption.ssl.keystore.keyMetaData.location=${dir.keystore}/ssl-keystore-passwords.properties
alfresco.encryption.ssl.truststore.location=${dir.keystore}/ssl.truststore
alfresco.encryption.ssl.truststore.provider=SunJCE
alfresco.encryption.ssl.truststore.type=JCEKS
alfresco.encryption.ssl.truststore.keyMetaData.location=${dir.keystore}/ssl-truststore-passwords.properties
‍‍‍‍‍‍‍‍‍

I don't know which one is making the thing working, please report if you find out.