KeyStore with BouncyCastleProvider: KeyStore integrity check failed

Question

I want to use a self-signed signature for ssl connections. I'm following this post.

My problem: After creating the Keystore my integrity-check fails.

Keytool-Error: java.io.IOException: KeyStore integrity check failed.

I'm still searching but maybe someone can save me some time.

score 33 · Accepted Answer · edited Dec 06 '12 at 05:39

33

Make sure you are using the right password to open the keystore. I was having this error and turns out I was still using the password from the example code in trusted.load()

edited Dec 06 '12 at 05:39

Andro Selva

53,910
52
193
240

answered Dec 06 '12 at 05:22

Eddie Fletcher

2,823
2
21
23

Assaf Gamliel · Answer 2 · 2012-12-06T08:44:28.483

13

I had the same problem where I tried to open a KeyStore file I saved locally and 2 reasons comes to mind:

You are storing your KeyStore and loading it with a different password.
Your KeyStore file was damaged some how thus flagging the integrity check.

I'd suggest you try to save and load another file with the same password (fixed) just to see if it will load normally.

edited Dec 06 '12 at 08:44

answered Dec 05 '12 at 16:07

Assaf Gamliel

11,935
5
41
56

can you please tell me where its being stored on a mac os ? – Hunt Jun 12 '13 at 18:03
The KeyStore , i even dont know it gets store in android phone or somewhere else – Hunt Jun 13 '13 at 08:54
Are you generating it inside your Android application or before hand? – Assaf Gamliel Jun 13 '13 at 10:49

score 4 · Answer 3 · answered Mar 06 '18 at 11:30

I have found another corner case that can provoke this message.

I exported a PKCS12 keystore with openssl and then tried to import it into an existing keystore with keytool. I received the 'integrity check failed' error at this step despite the password being good when I listed the contents of the PKCS12 keystore.

The problem turned out to be because I'd used a password exactly 50 characters long. Although this is accepted by openssl, I understand that this is the maximum size of the buffer used and that the last character of the password get overwritten by an 'end of string' character.

Exporting the PKCS12 keystore again with a password of only 49 characters long fixed my issue.

2

Exactly the problem I had. – revau.lt Dec 11 '18 at 13:11

score 1 · Answer 4 · answered Feb 20 '17 at 12:36

1

Ensure your keystore file is properly closed using FileOutputStream.close() or it will be marked as having lost integrity

answered Feb 20 '17 at 12:36

Cobolt

935
2
11
24

KeyStore with BouncyCastleProvider: KeyStore integrity check failed

4 Answers4

Linked