BCFKS Certificate cannot be validated

[Vespertinus]

We need to upload an BCFKS Certificate into the instance. For this we converted a P12 certificate using keytool.exe (part of JDK) and this command:

keytool -importkeystore -srckeystore TestCert.p12 -srcstorepass ******** -srcstoretype pkcs12 -destkeystore TestCert.bks -deststorepass ******** -deststoretype bks -providerclass org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath bcprov-jdk18on-1.80.jar

The TestCert.p12 file can be uploaded and validated fine. We could also validate this certificate with keytool and -list command. All looks fine but after uploading the Certificate to ServiceNow and setting type to BCFKS we get following error if we try to validate the certificate:

Error Message in the certificate record:

java.lang.Exception: Invalid bcfks_key_store : keystore validation failed

Error in Log:
CertificateValidator: bcfks error with message: unexpected end-of-contents marker: no thrown error
Warning in Log:
com.glide.script.RhinoEcmaError: Cannot convert null to an object.
<refname> : Line(1) column(0)
==> 1: gs.getSession().getProperty('csftRequestParams').keySet()

Any  ideas what could cause this problem? Thx

[Klemzy]

Hi Vespertinus,

I had the same issue, because I have set a different password on the keystore than it was on the key. Recreating them with the same password fixed my issue.