IBM Support

IT34504: GSKKM_StoreCACert: GSKit Error = 100 errors in db2diag.log

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as fixed if next.

Error description

  • In certain scenarios when using simplified SSL, connections to
    Db2 fails with GSKit Error = 100. We would see the following
    message in the db2diag.log:
    
    2020-11-04-14.43.18.351950-300 I2696E529             LEVEL:
    Error
    PID     : 29301                TID : 139664328828704 PROC :
    db2bp
    INSTANCE: <instance name>             NODE : 000
    HOSTNAME: <hostname>
    FUNCTION: DB2 UDB, common communication,
    sqlccCreateDefaultKeyDB, probe:258
    MESSAGE : ZRC=0x00000064=100=SQLUDI_RC_RECORD_WARNING "Unknown"
              DIA8111C Authorization failure.
    DATA #1 : <preformatted>
    GSKKM_attribute_get_buffer: GSKit Error = 100,
    KeyDB = ,
    EncPassLen = 32, PwdLen = 1024, DefaultKeyDBUsed = 1,
    ServerCert = .
    
    2020-11-04-14.43.18.352300-300 I3226E415             LEVEL:
    Error
    PID     : 29301                TID : 139664328828704 PROC :
    db2bp
    INSTANCE: <instance name>             NODE : 000
    HOSTNAME: <hostname>
    FUNCTION: DB2 UDB, common communication,
    sqlccMapSSLErrorToDB2Error, probe:258
    MESSAGE : DIA3604E The SSL function "GSKKM_attribute_get_buffer"
    failed with
              the return code "100" in "sqlccCreateDefaultKeyDB".
    

Local fix

  • No Local Fix
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * DB2 LUW USERS                                                *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * In certain scenarios when using simplified SSL, connections  *
    * to Db2 fails with GSKit Error = 100. We would see the        *
    * following message in the db2diag.log:                        *
    * 2020-11-04-14.43.18.351950-300 I2696E529             LEVEL:  *
    * Error                                                        *
    * PID     : 29301                TID : 139664328828704 PROC :  *
    * db2bp                                                        *
    * INSTANCE: <instance name>             NODE : 000             *
    * HOSTNAME: <hostname>                                         *
    * FUNCTION: DB2 UDB, common communication,                     *
    * sqlccCreateDefaultKeyDB, probe:258                           *
    * MESSAGE : ZRC=0x00000064=100=SQLUDI_RC_RECORD_WARNING        *
    * "Unknown"                                                    *
    *           DIA8111C Authorization failure.                    *
    * DATA #1 : <preformatted>                                     *
    * GSKKM_attribute_get_buffer: GSKit Error = 100,               *
    * KeyDB = ,                                                    *
    * EncPassLen = 32, PwdLen = 1024, DefaultKeyDBUsed = 1,        *
    * ServerCert = .                                               *
    * 2020-11-04-14.43.18.352300-300 I3226E415             LEVEL:  *
    * Error                                                        *
    * PID     : 29301                TID : 139664328828704 PROC :  *
    * db2bp                                                        *
    * INSTANCE: <instance name>             NODE : 000             *
    * HOSTNAME: <hostname>                                         *
    * FUNCTION: DB2 UDB, common communication,                     *
    * sqlccMapSSLErrorToDB2Error, probe:258                        *
    * MESSAGE : DIA3604E The SSL function                          *
    * "GSKKM_attribute_get_buffer" failed with                     *
    *           the return code "100" in                           *
    * "sqlccCreateDefaultKeyDB".                                   *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Upgrade to Db2 11.5.5.1 or higher                            *
    ****************************************************************
    

Problem conclusion

Temporary fix

  • NA
    

Comments

  • NA
    

APAR Information

  • APAR number

    IT34504

  • Reported component name

    DB2 CONNECT

  • Reported component ID

    DB2CONNCT

  • Reported release

    B50

  • Status

    CLOSED FIN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-10-12

  • Closed date

    2021-03-31

  • Last modified date

    2021-03-31

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    IT34881

Fix information

Applicable component levels

  • RB50 PSY

       UP

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M"},"Platform":[{"code":"PF054","label":"z\/OS"}],"Version":"11.5"}]

Document Information

Modified date:
31 August 2021