Usually, this error can be seen in Tomcat servlet container restart error logs (catalina.out), or in the browser while attempting to make a secure connection to your website.
This error refers to the fact that a private key has been generated using unknown or obsolete ciphers. This means the following command has been used for keystore generation:
keytool -genkey -keysize 2048 -alias 'keystore alias' -keystore 'your keystore'.jks
By default, Tomcat keytool instance generates the private key using a DSA algorithm that is now obsolete.
keytool -genkey -alias tomcat -keystore /root/ssltest/test_test_test.jks
*omitted -keyalg RSA and -keysize flags.
During the certificate issuance, the public key is converted to standard RSA and embedded in the body of the signed and issued certificate. So in this case, since there is no similar algorithm overlapping, an error occurs.
The solution is rather straightforward - simply reissue the certificate with a new keystore. You must specify -keyalg RSA to make sure that the key is generated using that algorithm.
The procedure is as follows:
keytool -genkey -keyalg RSA -keysize 2048 -alias 'keystore alias' -keystore 'your new keystore'.jks