Hi,
I'm using Websphere4 with IHS1.3.19, and I'm now trying to upgrade IHS
to 1.3.28 to catch up all fixes of IHS1.3.
When I have IHS1.3.28 installed and SSL configured, it failed to
initialize a SSL connection. The error is:
SSL0166E: Failure attempting to load GSK library.
I have IHS1.3.28 installed at /usr/HTTPServer1328 and IHS1.3.19
installed at /usr/HTTPServer, the GSK library is installed at
/usr/opt/ibm/gskkm, version 5, IHS1.3.19 can still run with SSL.
Can IHS1.3.28 run with GSK5? If it can so how to config IHS1.3.28 to use
GSK5?
Best
Regards
Jean

[ Post a follow-up to this message ]

Did you ever get anywhere with this? I am having the same issue.

[ Post a follow-up to this message ]

Hi,
this problem is due to an expired signer certificate ( from VeriSign ). You 
can't establish a new SSL config after the expiration last January. The solu
tion is IBM's PTF PQ83047 for IHS 1.3.28 which upgrades package GSKit to at 
least version 7.0.1.13 which doesn't contain the expired certificate any mor
e.

Maddin

P.S.: IBM's documentation to this issue :

HTTP server release notes

VeriSign Global Server ID Intermediate Root certificate authority expires on
 January 7, 2004
Description 	IBM HTTP Server Version 1.3.28 and Version 2.0.47 contain a VeriSign Globa
l Server ID Intermediate Root certificate authority (CA) which expired on January 7, 20
04. IBM HTTP Server Version 1.3.28 and Version 2.0.47 using this certificate when estab
lishing Secure Sockets Layer (SSL) (https://) sessions fail after January 7,
 2004.
Recommended response 	Download and apply interim fix PQ83047 (for IBM HTTP Server Versi
on 1.3.28) and interim fix PQ83048 (for IBM HTTP Server Version 2.0.47). These interim 
fixes include a new Global Security Kit (GSKit) library which contains the updated cert
ificates allowing you to create a new key database file and or or establish SSL session
s. You can download the interim fixes from the IBM HTTP Server Support page at: ht
tp://www-306.ibm.com/soft...rvers/support/.

Any certificates provided with this product have an expiration date. You are
 responsible for determining the expiration date and taking appropriate step
s if necessary to obtain renewal or replacement certificates from a certific
ate authority.

[ Post a follow-up to this message ]