Troubleshooting
Use this section to diagnose any problems you have with this scenario.
- CICS® TG fails to start up
- Check the CICS TG log
file. If you see the following message:
CTG8491E CTG910 Unable to read key ring CTGRING reason = java.io.IOException: Hardware error from call CSNBRNG returnCode 12reasonCode 0 CTG6513E CTG910 CICS Transaction Gateway failed to initialize
make sure ICSF is running before you start up CICS TG. - SSL requests fail
- If you see the following error in the log:
FINER: Hardware error from call CSNBRNGL returnCode 12 reasonCode 0
make sure ICSF is running without any errors. - SSL handshake errors
- Run an SSL trace on the Java™ client
and Gateway daemon by specifying the Java override:
or-Djavax.net.debug=ssl,handshake
For CICS TG the output goes to the error log. The Java client output goes to the standard output stream.-Djavax.net.debug=ssl,handshake,verbose - Unsupported cipher
- The level of JSSE determines which ciphers are supported. For
example, Java 7 supports
SSL_RSA_WITH_AES_128_CBC_SHA.