IBM InfoSphere Streams Version 4.1.1

Certificate or PKCS #12 file issue causes authentication to fail

Symptoms

InfoSphere® Streams prompts for a PKCS #12 password and then issues the following error message:
CDISC5400E Unexpected error while performing certificate authentication.  Cause: stream does not represent a PKCS12 key store

Causes

The file that is specified on the STREAMS_X509CERT environment variable is not an X.509 certificate or a PKCS #12 file that contains the certificate.

Resolving the problem

  • If you do not want to use certificate authentication, remove the STREAMS_X509CERT environment variable setting by entering the following command:
    unset STREAMS_X509CERT
  • To use certificate authentication, set the STREAMS_X509CERT environment variable to the fully qualified path of the client certificate or a PKCS #12 file that contains the certificate.
    • Client certificate example
      export STREAMS_X509CERT=/streamscertificates/client_certificate.pem
    • PKCS #12 file example
      export STREAMS_X509CERT=/streamscertificates/client_certificate.p12

    If the STREAMS_X509CERT environment variable is set, InfoSphere Streams attempts to use certificate authentication before it uses your default authentication method (LDAP or PAM).