IBM Support

PI46385: RATIONAL DEVELOPER FOR SYSTEM Z V9.1.1.1: CLIENT IP ADDRESS MISS ING IN GSK_SECURE_SOCKET_INIT() FAILED: CERTIFICATE IS NOT VALID

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When an SSL connection fails due to 'Certificate is not valid',
    Rational Developer for System z (RDz) should include
    the client IP address in the message written to the logs. Having
    the IP address will allow network administrators
    to easily translate the IP address into the real host name or
    MAC address at the time of failure. This information
    will be especially handy for administrators that support virtual
    environment where IP addresses are dynamically
    assigned.
    
    Message written to user log:
    
       8984    2015.04.30 10:18:28.748 CEST PID:33620933
    THREAD:2E25660000000002 TCB:008C30F8 USER:QROGN12 corejni.c:2448
    gsk_secure_socket_init() failed: Certificate is not valid
    
    Message written to server log:
    
    2015.02.20 14:49:29:228 CET PID:83956271 THREAD:2E09840000000002
    TCB:
    008CDCE0 USER:QROGN12
    ERROR: RseDaemon:Error initializing SSL environments
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: 01.Administrators for RDz servers            *
    ****************************************************************
    * PROBLEM DESCRIPTION: 01.When SSL has a connection issue,     *
    *                         server connection fails with "Error  *
    *                         initializing SSL environments" but   *
    *                         the client information that tried to *
    *                         connect is not logged.               *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    01.When SSL has a connection issue, server connection fails
       with "Error initializing SSL environments" but the client
       information that tried to connect is not logged to
       rseserver.log.
    

Problem conclusion

  • 01.RDz server code is updated to show the ip address and the
       port number of the connecting client when the connection
       fails with "Error initializing SSL environments".
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI46385

  • Reported component name

    RD/Z HOST

  • Reported component ID

    5724T0723

  • Reported release

    910

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2015-08-05

  • Closed date

    2015-10-16

  • Last modified date

    2015-10-21

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • FEKFZOS
    

Fix information

  • Fixed component name

    RD/Z HOST

  • Fixed component ID

    5724T0723

Applicable component levels

  • R910 PSY UI32110

       UP15/10/21 I 1000

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Document information

More support for: Rational Developer for System z

Software version: 9.1

Reference #: PI46385

Modified date: 21 October 2015