aXes in V7R3 with SSL not being started

Use this Forum to post your “How to …” questions about your use of aXes. This is not a technical support forum. Both the aXes Support Team at LANSA and other aXes customers may answer your questions. LANSA cannot guarantee the accuracy of any information posted by customers.

Moderator: jeanmichel

Post Reply
jaimosky
Posts: 12
Joined: 30 May 2017, 16:48

aXes in V7R3 with SSL not being started

Post by jaimosky » 24 Apr 2018, 01:17

HI,

We have just updated from V7R1 to V7R3 and I wanted to test SSL functionality (we use it in Live Environment)
I have just define a certificate and application, that I include in the configuration file:

SSLOnly=1
SSLPort=443
SSLAppID=AXES_SSL

I have also granted to the AXES user on the folder /QIBM/UserData/ICSS/Cert/Server *RW rights and *R to all of files included there.
(in fact, I have granted also *RWX but it doesn´t seem to work)

But, whenever I started STRAXESW3, I got following error message:

Code: Select all

                        Weitere Nachrichteninformationen                       
                                                                               
 Nachrichten-ID . . . . :   AXS5006       Bewertung  . . . . . . :   20        
 Nachrichtenart . . . . :   Diagnose                                           
 Sendedatum . . . . . . :   23.04.18      Sendezeit  . . . . . . :   16:51:40  
                                                                               
 Nachricht . . . :   Could not initialise SSL on port 443.                     
 Cause . . . . . :   An error occurred when initialising the Secure Sockets    
   Layer (SSL) on port number 443 using application identifier AXES_SSL.  ERRNO
   is 3401. SSL_ERRNO is -10.  Message text for ERRNO is: Berechtigung         
   abgelehnt.                                                                  
 Recovery  . . . :   Verify that SSL is configured correctly.  Possible        
   problems include:                                                           
     The application identifier has not been registered, the certificate has   
   not been associated with the application, the certificate is expired, or the
   AXES user is not authorised to the certificate.                             
   See member SSL in QSYSINC/H for the meaning of the SSL_ERRNO.  Look for     
     names of constants containing 'SSL_ERROR_'  



It seems as I am missing something, but I have double check the possible problems.
Anybody has an idea, what else I could change?

Thanks a lot for your support.

Jaime

jaimosky
Posts: 12
Joined: 30 May 2017, 16:48

Re: aXes in V7R3 with SSL not being started - Not anymore

Post by jaimosky » 24 Apr 2018, 16:51

I did again the steps and now is working. I do not see any diffrence with the settings from yesterday, but now is working.

MarkDuignan
Posts: 4
Joined: 25 Jul 2017, 17:41

Re: aXes in V7R3 with SSL not being started

Post by MarkDuignan » 24 Apr 2018, 17:10

The error looks like an authorization issue.
Maybe the user profile aXes runs under was not authorized to read the certificate?

Post Reply