PQ83048: Cannot create keystore with iKeyman after Verisign Certificates have expired on IBM HTTP Server V2.0.47 with GSKit Version 7

 A fix is available

PQ85834; 2.0.47,2.0.42,2.0.42.1,2.0.42.2: GSKit vulnerability and cumulative fix



APAR status
Closed as program error.

Error description
some versions of iKeyman/iKeycmd will no longer create new
keystores with the expired Verisign Certificate.  This failure
is dependent of whether a customer uses Verisign Certificates or
not.  This problem is for all platforms with GSKit Version 7
Local fix Problem summary
If one has expiring CA or Intermediate certs in
keyring and they try to create a new .kdb file,
will recieve an "An error occurred while insert
to the database" from the Ikeyman utility used
.kdb files.
Problem conclusion
Fix is in gskit ikeyman utility
Temporary fix Comments
APAR information
APAR number PQ83048
Reported component name WAS BASE 5.0
Reported component ID 5630A3600
Reported release 00A
Status CLOSED PER
PE NoPE
HIPER NoHIPER
Special Attention NoSpecatt
Submitted date 2004-01-09
Closed date 2004-01-16
Last modified date 2004-02-03

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Modules/Macros
GSKIT          

Publications Referenced

Fix information
Fixed component name WAS HTTP SERVER
Fixed component ID 5630A3603

Applicable component levels
R00W PSN    UP


Document Information


Product categories: Software > Application Servers > Distributed Application & Web Servers > IBM HTTP Server > Runtime
Operating system(s):
Software version: 00A
Software edition:
Reference #: PQ83048
IBM Group: Software Group
Modified date: Feb 3, 2004