DB2 - Problem description
Problem IT34885 | Status: Closed |
SIMPLIFIED SSL CONNECTIONS MAY FAIL WITH GSKIT ERROR 414 WHEN A STASH FILE IS IN USE | |
product: | |
DB2 FOR LUW / DB2FORLUW / B10 - DB2 | |
Problem description: | |
When simplified SSL connections are in use, such as when the SSLServerCertificate keyword is specified in the db2cli.ini, db2dsdriver.cfg, or the connection string, connections using SSL may fail with a GSKit 414 error when the following conditions are met: - The SSL_CLNT_KEYDB DBM CFG parameter is set, or the SSLClientKeystoredb keyword is set in the db2cli.ini, db2dsdriver.cfg, or connection string and - The SSL_CLNT_STASH DBM CFG parameter is set, or the SSLClientKeystash keyword is set in the db2cli.ini, db2dsdriver.cfg, or connection string | |
Problem Summary: | |
**************************************************************** * USERS AFFECTED: * * All DB2 clients on all Linux, Unix and Windows platforms at * * service levels Version 11.1 GA through to Version 11.1.4 Fix * * Pack 5 * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 11.1.4 Fix Pack 6 or higher. * **************************************************************** | |
Local Fix: | |
Use a Keystore DB password instead of a stash file. Un-set the SSL_CLNT_STASH dbm cfg parameter, or remove the SSLClientKeystash keyword from the db2cli.ini, db2dsdriver.cfg, or connection string. Set the SSLClientKeyStoreDBPassword in the db2cli.ini, db2dsdriver.cfg, or connection string to allow clients to use the keystore DB password instead of the stash file. | |
Solution | |
Workaround | |
**************************************************************** * USERS AFFECTED: * * All DB2 clients on all Linux, Unix and Windows platforms at * * service levels Version 11.1 GA through to Version 11.1.4 Fix * * Pack 5 * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 11.1.4 Fix Pack 6 or higher. * **************************************************************** | |
Comment | |
The complete fix for this problem first appears in DB2 Version 11.1.4 Fix Pack 6 and all subsequent Fix Packs. | |
Timestamps | |
Date - problem reported : Date - problem closed : Date - last modified : | 11.11.2020 31.03.2021 31.03.2021 |
Problem solved at the following versions (IBM BugInfos) | |
Problem solved according to the fixlist(s) of the following version(s) |