On Monday, 11/09/2009 at 02:01 EST, ASIFF AMAHED <[email protected]> 
wrote:
> Hi, 
> im having problems configuring SSL, maybe someone can help me to see 
what im 
> doing wrong.
> this is what i have so far:
> i get this message when i try to user SSL
> TCSSL022E Handshake failed: rc: 6 reason: Key label is not found  
> here is my openvm: 
> openvm listf (owner                                                      

> Directory = '/etc/gskadm'                                                

> User ID    Group Name  Permissions Type  Path name component             

> gskadmin   security    rw- r-- r--  F    'roncert.arm'                   

> gskadmin   security    rw- r-- ---  F    'Database.kdb'                  

> gskadmin   security    rw- --- ---  F    'Database.rdb'                  

> gskadmin   security    rw- r-- ---  F    'Database.sth'                  

> Ready; T=0.01/0.01 13:55:18  

TCSSL022E is pretty self-explanitory, I think:  The certficate identified 
in the application configuration file (SRVRFTP CONFIG, PROFILE TCPIP) 
cannot be located in the database.  Common reasons:

1. After you added the certificate, did you issue SSLADMIN REFRESH?  The 
SSL server caches everything in the database when it starts up, and this 
command causes it to re-read the database.  (That's why you can make 
changes to the database while the SSL server is running.)

2. You didn't use a 1- to 8-character UPPERCASE label when you added the 
certificate to the database.  Remember that TCP/IP configuration files are 
all uppercase (except where explicitly identified otherwise) and therefore 
a referenced label must be uppercase.

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to