On 4/5/2019 6:50 AM, daverankin...@gmail.com wrote:
I have started to get errors when trying to use the Service download SMP/E 
service on all my LPARs. I have checked all my Certificates and the CA Global 
and user certs and all trusted and in date. These worked only a few months ago.

I am getting this error.

GIM69207S ** RECEIVE PROCESSING HAS FAILED BECAUSE THE CONNECTION WITH THE
              SERVER FAILED. javax.net.ssl.SSLHandshakeException:
              com.ibm.jsse2.util.h: PKIX path building failed:
              java.security.cert.CertPathBuilderException:
              PKIXCertPathBuilderImpl could not build a valid CertPath.; 
internal
              cause is:   java.security.cert.CertPathValidatorException: The
              certificate issued by CN=DigiCert Glob
GIM20501I    RECEIVE PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12.

The DigiCert Global CA cert seems to be the issue but is valid until 2020.

Are you sure the DigiCert Global Root CA is connected to the keyring you specified in <ORDERSERVER> for the RECEIVE ORDER command?

Try this to see which certs are in the keyring:

RACDCERT ID(ring-owner) LISTRING(keyringname)

Kurt Quackenbush -- IBM, SMP/E Development
Chuck Norris never uses CHECK when he applies PTFs.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to