XCOMM1510E System SSL: gsk_secure_socket_init: RC = 435: Reason = Certification authority is unknown

Products

• XCOM Data Transport - z/OS

Issue/Introduction

We are testing XCOM with SystemSSL, after we changed SSL_VERSION to SYSTEM the test transfer failed with message:

XCOMM1510E System SSL: gsk_secure_socket_init: RC = 435: Reason = Certification authority is unknown                                 

Environment

Release : 12.0

Component : XCOM Data Transport for z/OS

Resolution

Per IBM the meaning of the message is:

Return code 435 from gsk_secure_socket_init means: Certification authority is unknown.

Explanation: The key database does not contain a certificate for the certification authority.

User response: Obtain the certificate for the certification authority and add it to the key database. When using a SAF key ring, the CA certificate must be TRUSTed.

You will need to address this with your Security Admin.