SAP PO – ID21108: Invalid PBE algorithm parameters

Last time I generated p12 certificate, and next I tried to import it using Key Storage. I received an error like on the below screen…

The problem is because cert is generated with algorithms that are not supported by SAP JVM 8 and my IAIK library version built-in the AS Java is too low. The fix is released with SAP Netweaver 7.5 SP26. I used workaround by adding “-certpbe PBE-SHA1-3DES -legacy” to my openssl command:

openssl pkcs12 -export -out cert.p12 -inkey private.key -in hostname.crt -certpbe PBE-SHA1-3DES -legacy

The p12 certificate generated in this way was successfully imported into Key Storage.