IBM Support

PI94189: CQ GSKIT SSL LIBRARY INCOMPATIBLE WITH NEWER GSKIT STASH FILE FORMAT

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • CRMMD1826E LDAP operation 'ratl_ldap_ssl_environment_init'
    failed with error code 408.  Description: Unknown error.
    Validating LDAP failed.
    
    Newer GSkit, for example from ikeyman (in IHS 8.5.5.12) is
    generating the ldapkey.sth file as a v2 stash encryption file
    because it is using gskit 8.0.50.79 which supports v2 stash
    encryption.
    
    ClearQuest is using a version of GSkit that does not support
    this newer stash file format, making it difficult to update the
    keystore without using a host with older gskit.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * ClearQuest                                                   *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * Secure LDAP connections may fail with the error message      *
    * "CRMMD1826E LDAP operation 'ratl_ldap_ssl_environment_init'  *
    * failed with error code 408.  Description: Unknown error" if  *
    * using v2 stash encryption files.  These v2 stash files are   *
    * generated with the newer versions of the GSKit such as       *
    * 8.0.50.79 which is shipped with IBM HTTP server 8.0.50.79.   *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    

Problem conclusion

  • A fix is available in ClearQuest 8.0.1.17 and 9.0.1.3.
    ClearQuest is now shipped with version 8.0.50.88 of the GSKit
    which supports the v2 stash encryption file format.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI94189

  • Reported component name

    CLEARQUEST WIN

  • Reported component ID

    5724G3600

  • Reported release

    901

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-02-22

  • Closed date

    2018-05-04

  • Last modified date

    2018-05-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    CLEARQUEST WIN

  • Fixed component ID

    5724G3600

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSSH5A","label":"Rational ClearQuest"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"901","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
30 June 2020