|
Problem IT34885
|
Status: Closed |
SIMPLIFIED SSL CONNECTIONS MAY FAIL WITH GSKIT ERROR 414 WHEN A STASH FILE IS IN USE
|
| product: |
DB2 FOR LUW / DB2FORLUW / B10 - DB2 |
| Problem description: |
When simplified SSL connections are in use, such as when the
SSLServerCertificate keyword is specified in the db2cli.ini,
db2dsdriver.cfg, or the connection string, connections using SSL
may fail with a GSKit 414 error when the following conditions
are met:
- The SSL_CLNT_KEYDB DBM CFG parameter is set, or the
SSLClientKeystoredb keyword is set in the db2cli.ini,
db2dsdriver.cfg, or connection string
and
- The SSL_CLNT_STASH DBM CFG parameter is set, or the
SSLClientKeystash keyword is set in the db2cli.ini,
db2dsdriver.cfg, or connection string |
| Problem Summary: |
****************************************************************
* USERS AFFECTED: *
* All DB2 clients on all Linux, Unix and Windows platforms at *
* service levels Version 11.1 GA through to Version 11.1.4 Fix *
* Pack 5 *
****************************************************************
* PROBLEM DESCRIPTION: *
* See Error Description *
****************************************************************
* RECOMMENDATION: *
* Upgrade to DB2 Version 11.1.4 Fix Pack 6 or higher. *
**************************************************************** |
| Local Fix: |
Use a Keystore DB password instead of a stash file.
Un-set the SSL_CLNT_STASH dbm cfg parameter, or remove the
SSLClientKeystash keyword from the db2cli.ini, db2dsdriver.cfg,
or connection string.
Set the SSLClientKeyStoreDBPassword in the db2cli.ini,
db2dsdriver.cfg, or connection string to allow clients to use
the keystore DB password instead of the stash file. |
| Solution |
|
| Workaround |
****************************************************************
* USERS AFFECTED: *
* All DB2 clients on all Linux, Unix and Windows platforms at *
* service levels Version 11.1 GA through to Version 11.1.4 Fix *
* Pack 5 *
****************************************************************
* PROBLEM DESCRIPTION: *
* See Error Description *
****************************************************************
* RECOMMENDATION: *
* Upgrade to DB2 Version 11.1.4 Fix Pack 6 or higher. *
**************************************************************** |
| Comment |
The complete fix for this problem first appears in DB2 Version
11.1.4 Fix Pack 6 and all subsequent Fix Packs. |
| Timestamps |
Date - problem reported :
Date - problem closed :
Date - last modified :
| 11.11.2020
31.03.2021
31.03.2021 |
| Problem solved at the following versions (IBM BugInfos) |
|
| Problem solved according to the fixlist(s) of the following version(s) |
