IBM Support

Invalid HTTP configuration might cause SSL0227E error

Troubleshooting


Problem

Specifying the IBM® HTTP Server directive SSLServerCert with an invalid certificate prevents SSL connections.

Symptom

Unable to connect to HTTP server using a SSL connection.

Cause

When the HTTP directive SSLServerCert does not specify a certificate value that matches a certificate in the CMS key database, an error SSL0227E will be logged in the HTTP error log. This is the format of the SSLServerCert directive:

SSLServerCert

  • Description - Sets the server certificate to use for this virtual host
  • Scope - IP-based virtual hosts
  • Values - certificate label
  • Usage - SSLServerCert my_certificate_label
  • * Notes - Use no delimiters around the certificate label.
    Ensure that the label is contained on one line.
    Leading and trailing whitespace is ignored.

Usage: SSLServerCert my_certificate_label

Resolving The Problem

The value specified for the SSLServerCert must match the label of a valid certificate in the CMS key database used by the HTTP server.

[{"Product":{"code":"SSEQTJ","label":"IBM HTTP Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"SSL","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"8.0;7.0","Edition":"Edition Independent","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
15 June 2018

UID

swg21307575