Yes, it does have crypto defined and does need it. The httpd process is WebSphere IHS. It is getting good hits on the crypto HW, but enough of these to make us wonder. We're trying to diagnose a very intermittent flurry of SSL failures. They don't correlate with these messages, but we'd still like to figure out what it is complaining about.
-----Original Message----- From: Linux on 390 Port [mailto:[email protected]] On Behalf Of Rick Troth Sent: Wednesday, August 31, 2016 9:16 AM To: [email protected] Subject: Re: [LINUX-390] Crypto error meanings? Or maybe I'm just blind. Sorry Marcy. Funny that the August 31 message includes a reference to May ... of /last/ year. DuckDuckGo led me to this ... http://www.ibm.com/support/knowledgecenter/SSZHFX_8.1.0/cclaj/CCL4651E.html Does the guest have crypto engines defined? (Does it need them? I haven't tinkered with the IBM libraries in a long time and forget what CP Dir tweaks are/were required.) 4651 is the "sbfn" in the message, not the return code, so ... this might not be a good hit. IBM also has some sample CCA code. I haven't eyeballed that, but may be clues about "subfunction 4651" or return code 0x80400009. http://www-03.ibm.com/security/cryptocards/ccasamples.shtml -- R; <>< On 08/31/2016 11:39 AM, Marcy Cortes wrote: > I guess I wasn't clear. > > The installation of the CCA package stopped the library missing > message and replaced it with a new one it seems > > It's the Aug 31 message I'm trying to understand. > > Marcy > -----Original Message----- > From: Linux on 390 Port [mailto:[email protected]] On Behalf Of > Rick Troth > Sent: Wednesday, August 31, 2016 8:25 AM > To: [email protected] > Subject: Re: [LINUX-390] Crypto error meanings? > > It's not a crypto error, per se. > > libcsulcca.so: > cannot open shared object file: > No such file or directory > > > In English, this means that the 'httpd' process cannot find the (new?) > library. > > Shared libraries ... so cool, but can be such a pain. (Compare to CMS, > the clumsiness of LOADLIB versus the simplicity of TXTLIB.) > > Did the installation guide for the CCA package talk about setting your > LD_LIBRARY_PATH environment variable? (i.e., when starting 'httpd' or > whatever) Did the doco at least tell you where libcsulcca.so lives? > Are things bitness consistent? (all 64 or all 31) > > -- R; <>< > > > On 08/31/2016 11:10 AM, Marcy Cortes wrote: >> Any idea how I can find what this means? >> >> Aug 31 09:51:19 cpzew03a0004 httpd: IBM Crypto >> ./f_secy2/aifadapt.c:1698, May 20 2015:21:02:25: ReqErr:RC=0x80400009 >> (sbfn 4651) Status=0x0 errno=0x9 ThreadID=0x3ffb29ff910 | >> 4396748372240 | >> >> We had been seeing lots of this one but after installing CCA package at >> IBM's recommendation it changed to this new one. >> This was what we were getting. >> Jun 6 08:03:45 cpzew03a0004 httpd: cca_specific.c >> token_specific_init: Error loading library: [libcsulcca.so: cannot >> open shared object file: No such file or directory] >> >> >> Marcy >> >> This message may contain confidential and/or privileged information. If you >> are not the addressee or authorized to receive this for the addressee, you >> must not use, copy, disclose, or take any action based on this message or >> any information herein. If you have received this message in error, please >> advise the sender immediately by reply e-mail and delete this message. Thank >> you for your cooperation. >> >> >> >> >> --------------------------------------------------------------------- >> - For LINUX-390 subscribe / signoff / archive access instructions, >> send email to [email protected] with the message: INFO LINUX-390 >> or visit >> http://www.marist.edu/htbin/wlvindex?LINUX-390 >> --------------------------------------------------------------------- >> - For more information on Linux on System z, visit >> http://wiki.linuxvm.org/ ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/ ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
