asked on

Error while creating key.kdb file

Hi I am securing IHS server. I am trying to create a new key.kdb file. On selecting the CMS type I am getting this error.
"The CMS Java native library was not found. Please make sure the SSL component required by your product is installed and the library path is define correctly."

I have correctly set JAVA_HOME and also /usr/opt/ibm/gskta/lib appears in the PATH. Is there some thing which I am missing out. please guide.

ASKER CERTIFIED SOLUTION

HonorGod

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SAB73

ASKER

Hi The earlier problem got resolved now. Looks like it was do do with the JAVA environment settings. Actually i was running ikeyman from /usr/opt/ibm/gskta/bin/gsk7ikm. When i ran ikeyman from /usr/java14/jre/bin/ikeyman it allowed me to create the CMS key.
Now I have enabled SSL on the IHS server but I cant get to the application and I see these errors in the plugin log file.

ERROR: lib_stream: openStream: Failed in r_gsk_secure_soc_init: GSK_ERROR_BAD_CERT(gsk rc = 414)
ERROR: ws_common: websphereGetStream: Could not open stream
ERROR: ws_common: websphereExecute: Failed to create the stream

and this errors in error_log
[error] SSL0404E: I/O failed, insufficient storage.

I have edited my plugin-cfg.xml file to correctly point to the key.kdb & key.sth file. and restarted the web server. Is there any thing which I need to know?

SAB73

ASKER

Hello. This problem has been resoolved now. The following link helped me in resolving the errors quoted above. http://www-128.ibm.com/developerworks/forums/thread.jspa?threadID=164530

Also your initial link helped in resolving the environmental issue. Thanks

SAB73

ASKER

Thanks for the initial link on resolving the CMS key.kdb issue.

HonorGod

Great. Thank you so much for sharing the helpful link.

Good luck & have a great day.