On Tuesday, 08/04/2009 at 11:36 EDT, Marcy Cortes 
<[email protected]> wrote:
> SSLSERV gets this when I try to connect:
> 
> DTCSSL022E Handshake failed: rc: 428 reason: Key entry does not contain 
a 
> private key
> 
> I used Option 5 to import it.

Option 5 doesn't import certificates.  Are you sure it wasn't 7 or 8? With 
option 5, they private key is already in the database (created by option 
4).

I've seen this error before when using SSLADMIN EXPORT on a z/VM 5.3 
system and then using option 7 to import into z/VM 5.4.  The import works 
because SSLADMIN EXPORT doesn't export the private key.  Contact the 
Support Center if this is the case.

Alan Altmark
z/VM Development
IBM Endicott

--------------------------------------------------------
Key Management Menu
 Database: <db_name>
 Expiration: <date>

 1 - Manage keys and certificates
 2 - Manage certificates
 3 - Manage certificate requests
 4 - Create new certificate request
 5 - Receive requested certificate or a renewal certificate
 6 - Create a self-signed certificate
 7 - Import a certificate
 8 - Import a certificate and a private key
 9 - Show the default key 
10 - Store database password 
11 - Show database record length

 0 - Exit program
-----------------------------------------------------
Key and Certificate Menu
 Label: <Certificate_label_name>

 1 - Show certificate information
 2 - Show key information
 3 - Set key as default
 4 - Set certificate trust status
 5 - Copy certificate and key to another database
 6 - Export certificate to a file
 7 - Export certificate and key to a file
 8 - Delete certificate and key
 9 - Change label
10 - Create a signed certificate and key 
11 - Create a certificate renewal request

 0 - Exit program

Reply via email to