Developer for z/OS client fails to connect to host using SSL
Problem
When using SSL with Developer for z/OS®, the client connection fails. The security configuration of this customer included an unknown Certificate Authority (an internal created CA, not Thawte or Verisign). This is similar to using a self-signed certificate and requires that the public portion of the CA certificate must be extracted and added to the keyring as well as the requested certificate.
Error
A stack trace will show:
java.net.SocketTimeoutException: Read timed out
*
In
rseserver.log
, this error
will be seen: ERROR CertificateValidator:
java.io.FileNotFoundException: RSEDRING (EDC5129I No such file or
directory. (errno2=0x05620062))
at java.io.FileInputStream.<init>(FileInputStream.java:123)
at java.io.FileInputStream.<init>(FileInputStream.java:83)
at com.ibm.etools.zos.server.ZosCertificateValidator.<init>
(ZosCertificateValidator.java:174)
at com.ibm.etools.zos.server.RseDaemon.main(RseDaemon.java:358)
and INFO LogHandler:
ServerKeyStore:java.io.IOException:
Failed validating certificate paths
Explanation and resolution
The RSE Server performs a validation of the certificate. In this case validation was failing. Add the internal issuing Certificate Authority certificate into the KEYRING used for RSED as well as the requested certificate.
Additional information
None.