Resolving scripted configuration errors

You get error messages in the job log concerning SSL. These errors might be caused when the SSL certificate is not set up correctly for the user who is running the scripted setup.

Symptoms

You get the following error messages in the job log: 
WASX7023E: Error creating "SOAP" connection to host "localhost"; exception information: com.ibm.websphere.management.exception.ConnectorNotAvailableException: SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty; targetException=java.lang.IllegalArgumentException: Error opening socket: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

Causes

The SSL certificate might not be set up correctly for the user who is running the scripted setup.

Environment

You are running Decision Server Rules, the Decision Center Enterprise console, or Decision Center Business console on WebSphere® Application Server or WebSphere Application Server for z/OS®.

Resolving the problem

  1. In the WebSphere Application Server Integrated Solutions Console, go to Security > SSL certificate and key management > SSL configurations.
  2. Click <was_node>/DefaultIIOPSSL, where <was_node> is the name of the WebSphere Application Server node in which the error occurs.
  3. Run the following TSO command: 
    RACDCERT ADDRING(<keyring_name>) LABEL('WebSphereCA') CERTAUTH)
    where <keyring_name> specifies the key ring to which this certificate is being connected. You must specify the ring name in use by WebSphere Application Server. For more information, see RACDCERT CONNECT (Connect a certificate to key ring).
  4. Run the following TSO command: 
    RACDCERT ID(<user_id>) CONNECT (RING(<keyring_name>) LABEL('WebSphereCA') CERTAUTH)
    where <user_id> is the RACF® user ID running the scripted setup.

If no errors occur when you run these commands, the SSL certificate is set up correctly to allow the script to run.