"algid parse error, not a sequence" when a java app tries to use a keystore

[raffaelespazzoli]

keystores expects key to be in the PKCS8 format. When creating the keystore keys must be converted to this format if they are not.

[raffaelespazzoli]

as of now there does't seem to be a good way of converting the format. so it is a responsibility of the certificate provisioner to ensure the certificate is in PKCS#8 format. if using cert-manager to provision certificates add the following: keyEncoding: pkcs8