How To Replace R1Soft SSL/TLS Certificate

R1Soft runs on Java and doesn't make it easy to replace certificates

Published on February 12, 2019

2 min read

This article will assume your private key is not password-protected, and the following filenames. Please adjust the example commands or rename your files.

Cert Type	File Name
Private key:	PrivateKeyNoPassphrase.key
Public certificate:	PublicWildcard.domain.tld.crt
Public cert authority intermediate cert:	PublicIntermediate-ca.crt

bash:Install prerequisites

cd ~ && yum install -y unzip wget

bash:Ensure private key & certs are present

vim PrivateKeyNoPassphrase.key
vim PublicWildcard.domain.tld.crt
vim PublicIntermediate-ca.crt

bash:Convert PEM format key/cert to DER format

openssl pkcs8 -topk8 -nocrypt -in /root/PrivateKeyNoPassphrase.key -inform PEM -out /root/PrivateKeyNoPassphrase.key.der -outform DER && \
openssl x509 -in /root/PublicWildcard.domain.tld.crt -inform PEM -out /root/PublicWildcard.domain.tld.crt.der -outform DER

bash:Prepare R1Soft folders

cd /usr/sbin/r1soft/jre/bin && chmod 755 java keytool

bash:Download and install importkey utility to import keys into a keystore

wget http://igniterealtime.jiveon.com/servlet/JiveServlet/download/196707-4718/importkey.zip && \
unzip importkey.zip

bash:Import private key and public cert into keystore

./java ImportKey /root/PrivateKeyNoPassphrase.key.der /root/PublicWildcard.domain.tld.crt.der cdp && \
./keytool -storepasswd -keystore /root/keystore.ImportKey && \
./keytool -keypasswd -alias cdp -keystore /root/keystore.ImportKey

bash:Import intermediate cert into keystore

mv /root/keystore.ImportKey /root/keystore && \
./keytool -import -alias intermed -file /root/PublicIntermediate-ca.crt -keystore /root/keystore -trustcacerts

bash:Backup old R1Soft keystore

mv /usr/sbin/r1soft/conf/keystore{,.bak}

bash:Install new keystore into R1Soft

cp /root/keystore /usr/sbin/r1soft/conf/keystore

bash:Restart R1Soft

service cdp-server restart

bash:Speed-run the cert import password prompts with this order

importkey
password
password
password
importkey
password
password
password