Replacing certificates for Db2 Data Gate 2.5.0 or lower

When the Cloud Pak for Data SSL certificate used by Db2 Data Gate is renewed, the Db2 Data Gate user interface shows a Data Gate server error. This error message indicates a server communication error.

About this task

As a result of this error, the adding, loading, and synchronization of tables will fail. The first step is to make sure that the communication error was really caused by an expired certificate.

Procedure

  1. To identify your Db2 Data Gate pod, use the following command:
    oc get po -n ${PROJECT_CPD_INSTANCE}  | grep dg-.*-data-gate

    Replace PROJECT_CPD_INSTANCE with the actual project name of your Db2 Data Gate installation. Then run the command.

    See the output in the following example. It was obtained for a Db2 Data Gate service installed in an OpenShift® project called cpd-service:

    dg-1652947351743776-data-gate-556b4b85c-zl4mb   5/5  Running  0   4d16h
  2. Display the log of the identified pod by using the following command:
    oc logs <dg-pod> -f data-gate-server

    Replace <dg-pod> with the pod name identified in step 1 (dg-1652947351743776-data-gate-556b4b85c-zl4mb in the previous example). Then run the command.

    If the output is similar to the following, the server error was caused by an expired certificate:

    <Message>[IBM][CLI Driver] SQL30081N  A communication error has been detected. 
    Communication protocol being used: "SSL".  Communication API being used: "SOCKETS".  
    Location where the error was detected: "".  Communication function detecting the error: 
    "sqlccSSLSocketSetup".  Protocol specific error code(s): "420", "*", "*".  
    SQLSTATE=08001</Message>
  3. Renew the SSL certificates for both, Db2 Data Gate and your target database (Db2 or Db2 Warehouse). To this end, follow the instructions in Migrating the SSL certificate for Db2 Data Gate.
    Important:

    As you complete the steps in Migrating the SSL certificate for Db2 Data Gate, Db2 Data Gate and your target database will be out of service for 10 to 20 minutes. Therefore, plan this outage ahead of time.