PI94189: CQ GSKIT SSL LIBRARY INCOMPATIBLE WITH NEWER GSKIT STASH FILE FORMAT

Rational ClearQuest Fix Pack 17 (8.0.1.17) for 8.0.1
Rational ClearQuest Fix Pack 3 (9.0.1.3) for 9.0.1
Rational ClearQuest Fix Pack 18 (8.0.1.18) for 8.0.1
Rational ClearQuest Fix Pack 4 (9.0.1.4) for 9.0.1
Rational ClearQuest Fix Pack 5 (9.0.1.5) for 9.0.1
Rational ClearQuest Fix Pack 19 (8.0.1.19) for 8.0.1
Rational ClearQuest Fix Pack 6 (9.0.1.6) for 9.0.1
Rational ClearQuest Fix Pack 20 (8.0.1.20) for 8.0.1
Rational ClearQuest Fix Pack 21 (8.0.1.21) for 8.0.1
Rational ClearQuest Fix Pack 7 (9.0.1.7) for 9.0.1
Rational ClearQuest Fix Pack 22 (8.0.1.22) for 8.0.1
Rational ClearQuest Fix Pack 8 (9.0.1.8) for 9.0.1
Rational ClearQuest Fix Pack 9 (9.0.1.9) for 9.0.1
Rational ClearQuest Fix Pack 23 (8.0.1.23) for 8.0.1
Rational ClearQuest Fix Pack 24 (8.0.1.24) for 8.0.1
Rational ClearQuest Fix Pack 25 (8.0.1.25) for 8.0.1

APAR status

• Closed as program error.

Error description

• CRMMD1826E LDAP operation 'ratl_ldap_ssl_environment_init'
  failed with error code 408.  Description: Unknown error.
  Validating LDAP failed.
  
  Newer GSkit, for example from ikeyman (in IHS 8.5.5.12) is
  generating the ldapkey.sth file as a v2 stash encryption file
  because it is using gskit 8.0.50.79 which supports v2 stash
  encryption.
  
  ClearQuest is using a version of GSkit that does not support
  this newer stash file format, making it difficult to update the
  keystore without using a host with older gskit.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * ClearQuest                                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Secure LDAP connections may fail with the error message      *
  * "CRMMD1826E LDAP operation 'ratl_ldap_ssl_environment_init'  *
  * failed with error code 408.  Description: Unknown error" if  *
  * using v2 stash encryption files.  These v2 stash files are   *
  * generated with the newer versions of the GSKit such as       *
  * 8.0.50.79 which is shipped with IBM HTTP server 8.0.50.79.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• A fix is available in ClearQuest 8.0.1.17 and 9.0.1.3.
  ClearQuest is now shipped with version 8.0.50.88 of the GSKit
  which supports the v2 stash encryption file format.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST WIN

• Fixed component ID

  5724G3600

Applicable component levels

• R901 PSY

     UP