Rececntly went through the same thing. The GeoTrust certificate needs to be reinstated.
Apparnelt IBM put out a Red Alert to remove the GeoTrust Certificate. They did update the Red Alert to re-instate GeoTrust, but forgot to tell everybody. HTH, -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Jesse 1 Robinson Sent: Saturday, August 25, 2018 12:28 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E RECEIVE ORDER Certificates No Lone Ranger in Phoenixland. Same thing happened to us. This failure started during the day on Thursday 23rd. It was OK in the morning, failing in the afternoon. We waited till next day to open an SR in case it was one of those transient problems. You know the kind. We got the advice in SR to issue this command: racdcert list(serial(023456)) certauth What we were to look for was Status: TRUST plus association to SMPE Key Ring. The certificate was there but as NOTRUST with no associations at all. We had not changed anything on our side since we added the GeoTrust Global CA certificate months ago. Until Thursday it was working. The fix was to modify the cert to TRUST and add the SMPE keyring. Now it's working fine. We may have overlooked some details when we added the cert. BTW the serial '023456' was not mentioned in our SR doc, but RACF knew it. . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-543-6132 Office ⇐=== NEW robin...@sce.com -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Ed Jaffe Sent: Saturday, August 25, 2018 9:57 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):SMP/E RECEIVE ORDER Certificates We have the DigiCert CA and G2 certificates added to our SMPKEYRING. Nevertheless, last night our RECEIVE ORDER jobs failed with: GIM69207S ** RECEIVE PROCESSING HAS FAILED BECAUSE THE CONNECTION WITH THE SERVER FAILED. javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; interna cause is: ..java.security.cert.CertPathValidatorException: The certificate issued by CN=GeoTrust Glob GIM20501I RECEIVE PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12. Are we the only ones? Is there something else that must be done other than what's documented in this PDF? https://apac01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww-03.ibm.com%2Fsupport%2Ftechdocs%2Fatsmastr.nsf%2FWebIndex%2FFLASH10884&data=02%7C01%7Callan.staller%40HCL.COM%7C20d164fe366b4861847808d60ab02a6f%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C636708149129455273&sdata=bqJ6j%2Bho8vCldafw7Ly5x4epmihBrtSZ43rmQ3K63eo%3D&reserved=0 -- Phoenix Software International Edward E. Jaffe 831 Parkview Drive North El Segundo, CA 90245 https://apac01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.phoenixsoftware.com%2F&data=02%7C01%7Callan.staller%40HCL.COM%7C20d164fe366b4861847808d60ab02a6f%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C636708149129455273&sdata=YhkBGj2qGbjQQ7P8RJ5%2Fyz6wFBEADv%2BVnmaZFd20sKs%3D&reserved=0 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ::DISCLAIMER:: -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
