IBM Support

"Certificates does not conform to algorithm constraints" exception when collecting Guardium Application Must Gather

Troubleshooting


Problem

When collecting Guardium application mustgather by CLI command "support must_gather app_issues", after inputting application debugger's timeout value, got following exception: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints

Symptom

Following exceptions appear after inputting application debugger's timeout value:

GuardiumTest001.ibmtest>support must_gather app_issues
This operation may take several minutes to complete.
Please enter numeric value for debugger's timeout in minutes (no more than 1440) or 0 to stop debugger.
Starting application debugger.
The application debug timeout is set to 5 min.
Please reproduce the problem for debugger.
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
at com.ibm.jsse2.j.a(j.java:7)
at com.ibm.jsse2.qc.a(qc.java:483)
at com.ibm.jsse2.ab.a(ab.java:167)
at com.ibm.jsse2.ab.a(ab.java:542)
at com.ibm.jsse2.bb.a(bb.java:234)
at com.ibm.jsse2.bb.a(bb.java:412)
at com.ibm.jsse2.ab.t(ab.java:338)
at com.ibm.jsse2.ab.a(ab.java:416)
at com.ibm.jsse2.qc.a(qc.java:435)
at com.ibm.jsse2.qc.h(qc.java:714)
at com.ibm.jsse2.qc.a(qc.java:831)
at com.ibm.jsse2.qc.startHandshake(qc.java:828)
at com.ibm.net.ssl.www2.protocol.https.c.afterConnect(c.java:90)
at com.ibm.net.ssl.www2.protocol.https.d.connect(d.java:17)
at com.ibm.net.ssl.www2.protocol.https.b.connect(b.java:97)
at com.guardium.utils.TimingoutHttpConnection.handleRequest(TimingoutHttpConnection.java:58)
at com.guardium.utils.TimingoutHttpConnection.sendRequest(TimingoutHttpConnection.java:95)
at com.guardium.utils.TimingoutHttpConnection.send(TimingoutHttpConnection.java:150)
at com.guardium.utils.EnableDebugRequest.main(EnableDebugRequest.java:47)
Caused by: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
at com.ibm.jsse2.wc.a(wc.java:30)
at com.ibm.jsse2.wc.checkServerTrusted(wc.java:76)
at com.ibm.jsse2.bb.a(bb.java:477)
... 14 more

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Guardium Appliances","Platform":[{"code":"PF016","label":"Linux"}],"Version":"10.0;10.0.1;10.1;10.1.2;10.1.3;9.0;9.1;9.5","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}},{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
16 June 2018

UID

swg22011693

Page Feedback