I ran into the exact problem yesterday and after downloading, installing in RACF and adding them to the SHOPZ keyring everything is now working.
On 8/27/18, 9:11 AM, "IBM Mainframe Discussion List on behalf of Jousma, David" <[email protected] on behalf of [email protected]> wrote: >So, there are a couple of certs needed. Obviously, your ShopZ generated cert >on the keyring you specify in ORDERSERVER stanza, but then for secured FTP you >do need the Digicert keys. At the behest of Kurt Q awhile back, I started >using the "javatruststore" on the downloadkeyring statement in the CLIENT >stanza for resolution of these Digicert certs. IBM JAVA support team >supplies those certs as part of the JAVA distribution, so nothing to put on >any SAF keyrings for that. > >javahome="/opt/fitb/java/Jre" classpath="/usr/lpp/smp/classes" >downloadmethod="ftp" >downloadkeyring="javatruststore"> > >-----Original Message----- >From: IBM Mainframe Discussion List [mailto:[email protected]] On >Behalf Of Ed Jaffe >Sent: Saturday, August 25, 2018 12:57 PM >To: [email protected] >Subject: SMP/E RECEIVE ORDER Certificates > >**CAUTION EXTERNAL EMAIL** > >**DO NOT open attachments or click on links from unknown senders or unexpected >emails** > >We have the DigiCert CA and G2 certificates added to our SMPKEYRING. >Nevertheless, last night our RECEIVE ORDER jobs failed with: > >GIM69207S ** RECEIVE PROCESSING HAS FAILED BECAUSE THE CONNECTION WITH THE > SERVER FAILED. javax.net.ssl.SSLHandshakeException: > com.ibm.jsse2.util.h: PKIX path building failed: > java.security.cert.CertPathBuilderException: > PKIXCertPathBuilderImpl could not build a valid CertPath.; > interna > cause is: ..java.security.cert.CertPathValidatorException: The > certificate issued by CN=GeoTrust Glob GIM20501I RECEIVE > PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12. > >Are we the only ones? Is there something else that must be done other than >what's documented in this PDF? > >https://urldefense.proofpoint.com/v2/url?u=http-3A__www-2D03.ibm.com_support_techdocs_atsmastr.nsf_WebIndex_FLASH10884&d=DwIGaQ&c=vYl7KJMDeuM7F-Nqf_hfailBifPmyspo7hrJGlNN7nU&r=Jrkg6Kqkg1RuQHbN9OpjcGoj051_POke_QQnGwsdEE8&m=pSBxq3s3hnKmBtYHcgbSFZ3Vdruo0bksBGWFm2Xn5_U&s=p-RLzoOlqhi_3qTuWMkEKScrVGsBXYrQoqYYNN1mRDI&e= > > >-- >Phoenix Software International >Edward E. Jaffe >831 Parkview Drive North >El Segundo, CA 90245 >https://urldefense.proofpoint.com/v2/url?u=https-3A__www.phoenixsoftware.com_&d=DwIGaQ&c=vYl7KJMDeuM7F-Nqf_hfailBifPmyspo7hrJGlNN7nU&r=Jrkg6Kqkg1RuQHbN9OpjcGoj051_POke_QQnGwsdEE8&m=pSBxq3s3hnKmBtYHcgbSFZ3Vdruo0bksBGWFm2Xn5_U&s=Bzo_ztWDkH3B8uoYWn4AOM3Y1g0qmq4SV5RZs6ltVIs&e= > >-------------------------------------------------------------------------------- >This e-mail message, including any attachments, appended messages and the >information contained therein, is for the sole use of the intended >recipient(s). If you are not an intended recipient or have otherwise received >this email message in error, any use, dissemination, distribution, review, >storage or copying of this e-mail message and the information contained >therein is strictly prohibited. If you are not an intended recipient, please >contact the sender by reply e-mail and destroy all copies of this email >message and do not otherwise utilize or retain this email message or any or >all of the information contained therein. Although this email message and any >attachments or appended messages are believed to be free of any virus or other >defect that might affect any computer system into which it is received and >opened, it is the responsibility of the recipient to ensure that it is virus >free and no responsibility is accepted by the sender for any loss or damage >arising in any way from its opening or use. > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, send email to >[email protected] with the message: INFO IBM-MAIN **CAUTION EXTERNAL >EMAIL** > >**DO NOT open attachments or click on links from unknown senders or unexpected >emails** > >This e-mail transmission contains information that is confidential and may be >privileged. It is intended only for the addressee(s) named above. If you >receive this e-mail in error, please do not read, copy or disseminate it in >any manner. If you are not the intended recipient, any disclosure, copying, >distribution or use of the contents of this information is prohibited. Please >reply to the message immediately by informing the sender that the message was >misdirected. After replying, please erase it from your computer system. Your >assistance in correcting this error is appreciated. > > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
