SourceId:com.ibm.ws.ssl.config.WSKeyStore.getKeyStore ProbeId:769 During WAS initialization with CA Top Secret

Article Id: 130502

Status: Published

Updated On: 04-04-2019 09:25

Products:

CA Top Secret , CA Top Secret - LDAP

Issue/Introduction:

Received the following messages during WAS startup:

FFDC Exception:java.io.IOException
SourceId:com.ibm.ws.ssl.config.WSKeyStore.getKeyStore ProbeId:769
Reporter:[email protected]
java.io.IOException: Failed validating certificate paths
at com.ibm.crypto.provider.RACFInputStream.a(Unknown Source)
at com.ibm.crypto.provider.RACFInputStream.<init>(Unknown Source)
at com.ibm.crypto.provider.safkeyring.a.getInputStream(Unknown
Source)
Caused by: java.security.InvalidAlgorithmParameterException: Invalid
at com.ibm.crypto.provider.d.a(Unknown Source)

key:com.ibm.ssl.keyStore
value:safkeyring:///WASKeyring.BBOCELL
key:com.ibm.ssl.keyStoreType
value:JCERACFKS

Environment:

z/OS 2.3.

Resolution:

Root certificate missing from the WAS keyrings.

TSS ADD(WASSTC) KEYRING(WASRING) RINGDATA(CERTAUTH,WASCA) USAGE(CERTAUTH)