Zowe API SSL connection to z/OSMF fails.

Products

• Top Secret

Issue/Introduction

Zowe API SSL connection to z/OSMF fails with:

javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.j: PKIX
path building failed: com.ibm.security.cert.IBMCertPathBuilderException:
unable to find valid certification path to requested target

ESM is Top Secret.

Environment

Release : 16.0

Resolution

The Zowe API Certificate chain is not complete on z/OSMF keyring.

All certificates in the chain must be in the keyring.

The Root/signing CA certificate was missing from the z/OSMF keyring.

Add the Zowe API's root certificate to the z/OSMF keyring using the following command:

TSS ADD(acid) KEYRING(keyringname) RINGDATA(root_owning_acid,root_digicertname) USAGE(CERTAUTH)