z/OS Cryptographic Services System SSL Programming
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


03353073

z/OS Cryptographic Services System SSL Programming
SC14-7495-00

03353073
Cannot match CRL distribution points.

Explanation

The DN in the Issuing Distribution Point extension of the CRL does not match a suitable DN in the certificate undergoing validation. The DN in the Issuing Distribution Point extension must match either:
  • A DN of type fullName in the Distribution Point of the CRL Distribution Points extension of the certificate undergoing validation
  • The CRLIssuer field in the Distribution Point of the CRL Distribution Points extension of the certificate undergoing validation
  • The Certificate Issuer name, if no CRL Distribution Point extension exists in the certificate undergoing validation

User response

Ensure that the certificate chain is correct and complies with the validation mode defined for the connection. Collect a System SSL trace containing the error and then contact your service representative if the error persists.

Parent topic: CMS status codes (03353xxx)

Go to the previous page Go to the next page

Notices | Terms of use | Support | Contact z/OS | zFavorites



Copyright IBM Corporation 1990, 2014