ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

SourceId:com.ibm.ws.ssl.config.WSKeyStore.getKeyStore ProbeId:769 During WAS initialization with CA Top Secret

book

Article ID: 130502

calendar_today

Updated On:

Products

Top Secret Top Secret - LDAP

Issue/Introduction

Received the following messages during WAS startup:

FFDC Exception:java.io.IOException 
SourceId:com.ibm.ws.ssl.config.WSKeyStore.getKeyStore ProbeId:769 
Reporter:[email protected] 
java.io.IOException: Failed validating certificate paths 
at com.ibm.crypto.provider.RACFInputStream.a(Unknown Source) 
at com.ibm.crypto.provider.RACFInputStream.<init>(Unknown Source) 
at com.ibm.crypto.provider.safkeyring.a.getInputStream(Unknown 
Source) 
Caused by: java.security.InvalidAlgorithmParameterException: Invalid 
at com.ibm.crypto.provider.d.a(Unknown Source) 

key:com.ibm.ssl.keyStore 
value:safkeyring:///WASKeyring.BBOCELL 
key:com.ibm.ssl.keyStoreType 
value:JCERACFKS 

Environment

z/OS 2.3.

Resolution

Root certificate missing from the WAS keyrings.

TSS ADD(WASSTC) KEYRING(WASRING) RINGDATA(CERTAUTH,WASCA) USAGE(CERTAUTH)
 
Powered by Wolken Software