Trying to bring up informix server after configuring Secure Socket Layer connections (SSL setup), server fails to come up with following error:
Initialization of Encryption...succeeded
oninit: Fatal error in initializing ASF with 'ASF_INIT_DATA' flags; asfcode = '-28014'.
WARNING: server initialization failed, or possibly timed out (if -w was used).
Check the message log, online.log, for errors.
You will see following error message in the online.log
shared memory not initialized for INFORMIXSERVER 'demo_on'
Message Log File: /work/1150FC9/demo/server/online.log
02:35:28 IBM Informix Dynamic Server Started.
02:35:28 Requested shared memory segment size rounded from 32656KB to 32768KB
02:35:28 The number of configured CPU poll threads exceeds 'NUMCPUVPS'.
NETTYPE 'demo_on' poll threads started on NET VPs.
Fri May 17 02:35:28 2013
02:35:28 Event alarms enabled. ALARMPROG = '/work/1150FC9/etc/alarmprogram.sh'
02:35:28 IBM Global Security Kit (GSKit) version 184.108.40.206.
02:35:28 Secure Sockets Layer error: GSK_ERROR_BAD_KEYFILE_PASSWORD.
The keystore name used in the command to create the keystore and the stash file (i.e. the values specified along with -db option) did not match the DBSERVERNAME value in the onconfig file.
Resolving the problem
The keystore name used in the command to create the keystore and the stash file must be specified as <servername>.kdb, where servername is value of the DBSERVERNAME in the onconfig file.
If DBSERVERNAME in onconfig file in demo_on, then you should replace <dbservername>.kdb with demo_on.kdb, in following commands to create the keystore and the stash file.
gsk8capicmd -keydb -create -db <dbservername>.kdb -pw <password> -type cms -stash
(the following is all in one line)
gsk8capicmd -cert -create -db <dbservername>.kdb -pw <password>
-label <my_ssl_label> -size 1024 -default_cert yes
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.