Fix (APAR):  PQ76458

Status:  Fix

Release:  1.3.26,1.3.19.4,1.3.19.3,1.3.19.2,1.3.19.1,1.3.19

Operating System:  All

Supersedes Fixes:  

CMVC Defect:  PQ76458

Byte size of APAR:  53722126

Date: 2003-07-30

Abstract:  Server doesn't understand characters in Client Cert

Description/symptom of problem:  Fix is also for IHS2.0

[error] SSL0115E: Initialization error, Error validating ASN fields in certificate.

Directions to apply fix:  Directions to apply IBM HTTP Server Fix
For Windows:
1) Stop IHS service by going to window's services panel and right clicking on IBM HTTP Server service and clicking stop (if your IBM HTTP Server service starts automatically (each time you reboot machine) you may need to stop it every time you have to reboot your machine.)

2) Execute the following command from a temp directory (i.e. c:\temp) to extract base GSKIT installation files and place them in c:\temp
      
      gsk5bas.exe  c:\temp

**Note: Make sure the directory tree you place gsk5bas.exe in is 8.3 style, no spaces, quotes, etc.

3) Uninstall the existing version of gskit by executing the following command from the Windows root directory (usually c:\WINNT)

   gsk5BUI HTTPServerSSL_1.3.26.V

   (where 'v',  indicates your installed IHS release e.g. 1.3.26.1)

  **Note:  Prior to running the above command you can verify the registered IHS version by running the regedit.exe utility and checking the Windows REGISTRY under HKEY_LOCAL_MACHINE\SOFTWARE\IBM\GSK5\CurrentVersion\REGAPPS

   The "Registered" value should be the value you use in the gsk5BUI uninstall command above.

4)  Reboot your machine.

5) Install the new version of GSKIT by executing the following command from c:\temp and following the installation panels:

   setup HTTPServerSSL_1.3.26.V

   (where 'V' , which is optional, indicates your installed IHS release e.g. 1.3.26.1)

   The installation process will prompt you for a destination directory in which to place the GSKIT files (usually c:\Program Files\IBM\gsk5)

6) Check GSKIT Version is 5.0.5.82 by running the regedit.exe utility and checking the Windows REGISTRY under HKEY_LOCAL_MACHINE\SOFTWARE\IBM\GSK5\CurrentVersion\

   The data for Version should be 5.0.5.82

7) Restart server (through service panel) and test to make sure problem has disappeared

For Unix:
1) Stop the IBM HTTP Server
2) Install Gskit using native install for specific platfrom  
3) Verify installed correctly using system commands (example lslpp -L|grep gsk for aix)  
4) Start the IBM HTTP Server


Directions to remove fix:  Remove IBM HTTP Server Fix
For Windows:
1) Stop IHS service by going to window's services panel and right clicking on IBM HTTP Server service and clicking stop 
2) Uninstall gskit by executing the following command from the Windows root directory (usually c:\WINNT)

   gsk5BUI HTTPServerSSL_1.3.26.V

   (where 'v',  indicates your installed IHS release e.g. 1.3.26.1)

  **Note:  Prior to running the above command you can verify the registered IHS version by running the regedit.exe utility and checking the Windows REGISTRY under HKEY_LOCAL_MACHINE\SOFTWARE\IBM\GSK5\CurrentVersion\REGAPPS

The "Registered" value should be the value you use in the gsk5BUI uninstall command above.

For Unix:
1) Stop the IBM HTTP Server
2) Remove Gskit using native uninstall for specific platform  
3) Verify uninstalled using system commands (example lslpp -L|grep gsk for aix)  
4) Start the IBM HTTP Server



Directions to re-apply fix:  ReApply IBM HTTP Server Fix
For Windows:
1) Stop IHS service by going to window's services panel and right clicking on IBM HTTP Server service and clicking stop (if your IBM HTTP Server service starts automatically (each time you reboot machine) you may need to stop it every time you have to reboot your machine.)

2) Execute the following command from a temp directory (i.e. c:\temp) to extract base GSKIT installation files and place them in c:\temp
      
      gsk5bas.exe  c:\temp

**Note: Make sure the directory tree you place gsk5bas.exe in is 8.3 style, no spaces, quotes, etc.

3) Uninstall the existing version of gskit by executing the following command from the 
   Windows root directory (usually c:\WINNT)

   gsk5BUI HTTPServerSSL_1.3.26.V

   (where 'v',  indicates your installed IHS release e.g. 1.3.26.1)

  **Note:  Prior to running the above command you can verify the registered IHS version by running the regedit.exe utility and checking the Windows REGISTRY under HKEY_LOCAL_MACHINE\SOFTWARE\IBM\GSK5\CurrentVersion\REGAPPS

   The "Registered" value should be the value you use in the gsk5BUI uninstall command above.

4)  Reboot your machine.

5) Install the new version of GSKIT by executing the following command from c:\temp and following the installation panels:

   setup HTTPServerSSL_1.3.26.V

   (where 'V' , which is optional, indicates your installed IHS release e.g. 1.3.26.1)

The installation process will prompt you for a destination directory in which to place the GSKIT files (usually c:\Program Files\IBM\gsk5)

6) Check GSKIT Version is 5.0.5.82 by running the regedit.exe utility and checking the Windows REGISTRY under     

   HKEY_LOCAL_MACHINE\SOFTWARE\IBM\GSK5\CurrentVersion\

   The data for Version should be 5.0.5.82

7) Restart server (through service panel) and test to make sure problem has disappeared

For Unix:
1) Stop the IBM HTTP Server
2) Install Gskit using native install for specific   platform  
3) Verify installed correctly using system commands (example lslpp -L|grep gsk for aix)  
4) Start the IBM HTTP Server


Additional Information:  This fix is for IHS1.3.19.x, IHS1.3.26.x, and IHS2.0.42.x