Hi,
im having problems configuring SSL, maybe someone can help me to see what im
doing wrong.
this is what i have so far:
i get this message when i try to user SSL
TCSSL022E Handshake failed: rc: 6 reason: Key label is not found
here is my openvm:

openvm listf (owner
Directory = '/etc/gskadm'
User ID    Group Name  Permissions Type  Path name component
gskadmin   security    rw- r-- r--  F    'roncert.arm'
gskadmin   security    rw- r-- ---  F    'Database.kdb'
gskadmin   security    rw- --- ---  F    'Database.rdb'
gskadmin   security    rw- r-- ---  F    'Database.sth'
Ready; T=0.01/0.01 13:55:18




On 11/8/09, Alan Altmark <[email protected]> wrote:
>
> On Saturday, 11/07/2009 at 06:27 EST, ASIFF AMAHED <[email protected]>
> wrote:
> > Is there any way that i can check if i have the necessary PTFs for the
> SSL
> > configuration?
>
> Go to http://www.vm.ibm.com/service for a link to information on to use
> SES to find out about PTFs and RSUs that you have applied.
>
> > I'm running CPlevel 9.1 , when i installed Zvm i only put the RSU that
> came
> > with the installation.
> > IBM 2096; z/VM Version 5 Release 4.0, service level 0901 (64-bit), VM
> TCP/IP Lev
> > el 540; RSU 0901 running TCPIP MODULE E2 dated 03/09/09 at 22:25
> > The reason that i ask is because I'm having problems importing my
> certificates,
> > sorry but instructions in the manual are not that clear.
>
> There is information about SSL service at
> http://www.vm.ibm.com/related/tcpip/tcsslsvc.html.  It indicates that the
> latest RSU that has SSL service is 0902.  This is confirmed by looking at
> the contents of the latest RSU at http://www.vm.ibm.com/service/rsu.
> There is also APAR PK87640 that is not yet on an RSU.
>
> From the SSL Service page, note that APAR PK75661 is currently open, which
> provides export-with-key capability to z/VM 5.3.  You will need to contact
> the Support Center to discuss.  (The current SSLADMIN EXPORT function in
> z/VM 5.3 doesn't export *with* the private key.)
>
> Alan Altmark
> z/VM Development
> IBM Endicott
>

Reply via email to