My Oracle Support Banner

DSEE - Renewing Secure Certificate on Directory Proxy Server with 'dpadm' Hangs (Doc ID 1542102.1)

Last updated on OCTOBER 14, 2019

Applies to:

Oracle Directory Server Enterprise Edition - Version to [Release 6.0]
Information in this document applies to any platform.


Attempts to renew the secure certificate on a DSEE Directory Proxy Server instance throws an error when requesting a new CSR file for an existing certificate:

# dpadm request-cert --keysize 2048 --name <HOSTNAME>.<DOMAIN>.com --country US --state <State> --city "<City>" --org "<ORG>" --org-unit "<ORG_UNIT>" -o /var/tmp/<HOSTNAME>.<DOMAIN>.com.csr /DPS6/`<HOSTNAME>` <CERT_NAME>
keytool error: java.lang.Exception: Key pair not generated, alias already exists

However when specifying a different cert alias to generate the CSR for the cert renewal the command  hangs for about 15 mins and does not generate the CSR.




To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.