oninit: Fatal error in initializing ASF with 'ASF_INIT_DATA' flags; asfcode = '-28014'.

Technote (troubleshooting)


Problem(Abstract)

Trying to bring up informix server after configuring Secure Socket Layer connections (SSL setup), server fails to come up with following error:

Initialization of Encryption...succeeded
oninit: Fatal error in initializing ASF with 'ASF_INIT_DATA' flags; asfcode = '-28014'.
Initializing ASF...FAILED

WARNING: server initialization failed, or possibly timed out (if -w was used).
Check the message log, online.log, for errors.

Symptom

You will see following error message in the online.log


      shared memory not initialized for INFORMIXSERVER 'demo_on'

      Message Log File: /work/1150FC9/demo/server/online.log
      02:35:28  IBM Informix Dynamic Server Started.
      02:35:28  Requested shared memory segment size rounded from 32656KB to 32768KB
      02:35:28  The number of configured CPU poll threads exceeds 'NUMCPUVPS'.
               NETTYPE 'demo_on' poll threads started on NET VPs.


      Fri May 17 02:35:28 2013

      02:35:28  Event alarms enabled.  ALARMPROG = '/work/1150FC9/etc/alarmprogram.sh'
      02:35:28  IBM Global Security Kit (GSKit) version 7.0.4.27.
      02:35:28  Secure Sockets Layer error: GSK_ERROR_BAD_KEYFILE_PASSWORD.


Cause

The keystore name used in the command to create the keystore and the stash file (i.e. the values specified along with -db option) did not match the DBSERVERNAME value in the onconfig file.

Resolving the problem

The keystore name used in the command to create the keystore and the stash file must be specified as <servername>.kdb, where servername is value of the DBSERVERNAME in the onconfig file.

For example:
If DBSERVERNAME in onconfig file in demo_on, then you should replace <dbservername>.kdb with demo_on.kdb, in following commands to create the keystore and the stash file.



    gsk8capicmd -keydb -create -db <dbservername>.kdb -pw <password> -type cms -stash

    (the following is all in one line)

    gsk8capicmd -cert -create -db <dbservername>.kdb -pw <password>

    -label <my_ssl_label> -size 1024 -default_cert yes

Related information

Configuring Informix instance for SSL connection.
SLL Connection after Hardware Failure

Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

Informix Servers

Software version:

11.1, 11.5, 11.7, 12.1

Operating system(s):

AIX, HP-UX, Linux, Solaris, Windows

Reference #:

1637919

Modified date:

2013-05-20

Translate my page

Machine Translation

Content navigation