PH63087: "NO CERTIFICATE WAS SENT AS PER GSK_ATTRIBUTE_GET_CERT_INFO (LOCAL, RC = 407, GSK_ERROR_BAD_KEYFILE_LABEL)" ERROR

APAR status

• Closed as program error.

Error description

• Even though the IBM Transformation Extender map runs
  successfully an error message is observed in the wtxsslclient
  log file:
  "No certificate was sent as per gsk_attribute_get_cert_info
  (LOCAL, rc = 407, GSK_ERROR_BAD_KEYFILE_LABEL)"
  

Local fix

• ITXCQ - ITX00062642
  TR / TR
  Circumvention: None
  

Problem summary

• Users Affected:
  IBM Transformation Extender users of the SSL/TLS protocol when
  using the HTTP, FTP or Email adapters.
  
  Problem Description:
  Invalid error messages are getting logged whenever using the TLS
  protocol without client authentication.
  
  Platforms Affected:
  All
  

Problem conclusion

• The GSKit-based SSL/TLS component of the HTTP adapter no longer
  outputs an error message when a certificate label is
  unspecified.  Before this fix, a "GSK_ERROR_BAD_KEYFILE_LABEL"
  message was logged to the error file.  With this fix, the false
  error is no longer logged in those configurations that do not
  require mutual TLS.
  
  Applies to:
  10.1.0.2, 10.1.1.1, 10.1.2.1, 11.0.0.0, 11.0.1.0
  
  Fixed in the next service packs and releases.
  
  To obtain the fix for this APAR:
  
  To see if the next fix pack or product release is available,
  check the IBM Transformation Extender product Release Notes
  page:
  https://www.ibm.com/support/pages/node/318755
  
  If a fix pack release is available, download it from Fix
  Central:
  http://www.ibm.com/support/fixcentral/
  
  If a new product release is available, download it from Passport
  Advantage:
  https://www.ibm.com/software/passportadvantage/pao_customer.html
  
  
  If the fix pack or product release is not available and you
  require the APAR fix immediately, request a Limited Availability
  Interim Fix (LAIF) by opening a support Case:
  https://www.ibm.com/mysupport
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ITX

• Fixed component ID

  5724Q2300

Applicable component levels