|
Home > Archive > WebSphere HTTP Server > June 2004 > SSL0166E: Failure attempting to load GSK library.
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
SSL0166E: Failure attempting to load GSK library.
|
|
|
| Hi,
I'm using Websphere4 with IHS1.3.19, and I'm now trying to upgrade IHS
to 1.3.28 to catch up all fixes of IHS1.3.
When I have IHS1.3.28 installed and SSL configured, it failed to
initialize a SSL connection. The error is:
SSL0166E: Failure attempting to load GSK library.
I have IHS1.3.28 installed at /usr/HTTPServer1328 and IHS1.3.19
installed at /usr/HTTPServer, the GSK library is installed at
/usr/opt/ibm/gskkm, version 5, IHS1.3.19 can still run with SSL.
Can IHS1.3.28 run with GSK5? If it can so how to config IHS1.3.28 to use
GSK5?
Best
Regards
Jean
| |
| allenwone 2004-06-14, 5:48 pm |
| Did you ever get anywhere with this? I am having the same issue.
| |
| Maddin 2004-06-22, 3:03 am |
| Hi,
this problem is due to an expired signer certificate ( from VeriSign ). You can't establish a new SSL config after the expiration last January. The solution is IBM's PTF PQ83047 for IHS 1.3.28 which upgrades package GSKit to at least version 7.0.1.13 which doesn't contain the expired certificate any more.
Maddin
P.S.: IBM's documentation to this issue :
HTTP server release notes
VeriSign Global Server ID Intermediate Root certificate authority expires on January 7, 2004
Description IBM HTTP Server Version 1.3.28 and Version 2.0.47 contain a VeriSign Global Server ID Intermediate Root certificate authority (CA) which expired on January 7, 2004. IBM HTTP Server Version 1.3.28 and Version 2.0.47 using this certificate when establishing Secure Sockets Layer (SSL) (https://) sessions fail after January 7, 2004.
Recommended response Download and apply interim fix PQ83047 (for IBM HTTP Server Version 1.3.28) and interim fix PQ83048 (for IBM HTTP Server Version 2.0.47). These interim fixes include a new Global Security Kit (GSKit) library which contains the updated certificates allowing you to create a new key database file and or or establish SSL sessions. You can download the interim fixes from the IBM HTTP Server Support page at: http://www-306.ibm.com/software/web...rvers/support/.
Any certificates provided with this product have an expiration date. You are responsible for determining the expiration date and taking appropriate steps if necessary to obtain renewal or replacement certificates from a certificate authority. |
|
|
|
|