Startup Error: DerInputStream.getLength(): lengthTag=109, too big

Troubleshooting > Errors on Connector Startup > Startup Error: DerInputStream.getLength(): lengthTag=109, too big

With version 4.0.0 of the Connector, two keystore file formats are supported, jks and pkcs12. The default format is pkcs12. If you upgraded your Connector and did not convert a JKS key or forgot to add the property, ssl.key-store.type="jks" to the configuration file, you will see this error on startup. If the type is not specified, the Connector expects pkcs12 format. If, for example, you are using a jks formatted keystore with the default pkcs12 type, you will see this error in the log for the Connector:

io.vertx.core.VertxException: java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big.

This error is caused by the problems with the format of the keystore file used. To resolve this issue:

1. Stop the Connector.

2. Open the configuration file for the Connector.

3. Locate the following groups in the configuration file. This configuration is an example of what NOT to do; the configuration will result in the error, and the Connector will not start. The extension for the cx-srver.key-store.name property uses a file name with the jks extension, but the cx-server.protocol.http-server.ssl.key-store.type property is not set (null). By default the expected keystore format type is pfx (the extension). :

cx-server {
security {
secret-provider = "com.thingworx.security.provider.keystore.KeyStoreProvider"
defaault-encryption-key-length = 256

keystore {
password-file-path = "<Path_to_Keystore_Password_File>"
password-rile-name = "<Keystore_Password_File_Name>"
path = "<Path_to_Keystore_File>"
name = "<Keystore_File_Name>.jks"
}
}
protocol {
http-server {
ssl
key-store {
type = null
}
}
}
}
}

4. To resolve this issue, make sure that the extension of the file specified in the property keystore.name matches the value of the protocol.http-server.ssl.key-store.type property. If the extension is jks, the type must to set to "jks".