{"id":5637,"date":"2016-04-13T11:18:23","date_gmt":"2016-04-13T03:18:23","guid":{"rendered":"http:\/\/rmohan.com\/?p=5637"},"modified":"2016-04-13T11:18:23","modified_gmt":"2016-04-13T03:18:23","slug":"failed-in-r_gsk_secure_soc_init-gsk_error_bad_cert","status":"publish","type":"post","link":"https:\/\/mohan.sg\/?p=5637","title":{"rendered":"Failed in r_gsk_secure_soc_init: GSK_ERROR_BAD_CERT"},"content":{"rendered":"<p>The architecture includes 2 WAS Base installations in different nodes(physical hosts) and an IHS installation on one of the physical node (Shares the Base server physical host)<\/p>\n<p>After following these steps and creating a cluster in by previous post, If you want to enable the https protocol at IHS level to access the application, The following steps have to be followed.<\/p>\n<p><b>Error:<\/b> This error will be seen in the logs, if you are trying to access the application\u00a0 on node2 using https protocol.<\/p>\n<p>[01\/2014:05:00:10.44085] 0000 &#8211; ERROR: lib_stream: openStream: Failed in r_gsk_secure_soc_init: GSK_ERROR_BAD_CERT(gsk rc = 414) PARTNER CERTIFICATE DN=CN=hostname,OU=hostNode02Cell,OU=hostNode01,O=IBM,C=US, Serial=04:6f:ec:5e:84:05:56<br \/>\n[01\/Dec\/2014:05:00:10.44092] 0000510d c57fb700 &#8211; ERROR: ws_common: websphereGetStream: Could not open stream<br \/>\n[01\/Dec\/2014:05:00:10.44097] 0000510d c57fb700 &#8211; ERROR: ws_common: websphereExecute: Failed to create the stream<\/p>\n<p>This error is seen as the plugin-cfg.kdb that is defined in the ihs configuration file does not have the node02 certificate installed.<\/p>\n<p><b>Step1:<\/b> Login to a WAS console,<\/p>\n<p><b>Step2:<\/b> Navigate to Servers -&gt; ServerTypes -&gt; Webservers -&gt; webserver1 -&gt; Plug-in properties<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"http:\/\/rmohan.com\/wp-content\/uploads\/2016\/04\/download.png\" rel=\"attachment wp-att-5638\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-5638\" src=\"http:\/\/rmohan.com\/wp-content\/uploads\/2016\/04\/download.png\" alt=\"download\" width=\"280\" height=\"96\" srcset=\"https:\/\/mohan.sg\/wp-content\/uploads\/2016\/04\/download.png 280w, https:\/\/mohan.sg\/wp-content\/uploads\/2016\/04\/download-150x51.png 150w\" sizes=\"(max-width: 280px) 100vw, 280px\" \/><\/a><b>Step3:<\/b> Click on Manage Keys and Certificates -&gt; CMSKeyStore -&gt; Signer Certificates<\/p>\n<p><b>Step4:<\/b>\u00a0 Click on Retrieve from port and provide the hostname and port of the base server.<\/p>\n<p>ex: localhost(node2), Port (9043)<\/p>\n<p>This will extract the certificate installed on the node2 and add that to the plugin kdb file.<\/p>\n<p><b>Step5: <\/b>After saving the certificate, Navigate back to Plugin properties and click on copy to webserver keystore directory.<\/p>\n<p>This will create a new set of plugin-key.kdb and plugin-key.sth.<\/p>\n<p><b>Step6:<\/b> Now check the plugin-cfg.xml for the kdb and sth path and copy them to the designated paths and restart the IHS.<\/p>\n<p><b>Step7:<\/b> Test the application by accessing it with https protocol.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The architecture includes 2 WAS Base installations in different nodes(physical hosts) and an IHS installation on one of the physical node (Shares the Base server physical host)<\/p>\n<p>After following these steps and creating a cluster in by previous post, If you want to enable the https protocol at IHS level to access the application, The [&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5637"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5637"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5637\/revisions"}],"predecessor-version":[{"id":5639,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5637\/revisions\/5639"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5637"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5637"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5637"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}