CICS Transaction Gateway V5 The WebSphere ... - IBM Redbooks

8.4 Problem determination
8.4.1 Tips and utilities
208 CICS Transaction Gateway V5
In this section, we document information we learned while configuring this
scenario, and further information on problem determination and tracing.
We found the keytool utility useful for verifying that we had specified the correct
password for a keystore and that a keystore was intact. The following keytool
command lists the contents of the keystore jsseclientss.jks using the password
default:
keytool -list -keystore jsseclientss.jks -storepass default
If the password was incorrect, the following error is output:
keytool error: java.io.IOException: Keystore was tampered with, or password
was incorrect
If the keystore is corrupt, the following error is output:
keytool error: java.io.IOException: Invalid keystore format
In the following sections, we detail common errors we came across when setting
up JSSE and testing SSL.
CCL6525E Unable to start handler for the ssl: protocol
This error message can appear in the CICS TG log for a number of reasons. The
CICS TG will also give the exception message that occurred in the underlying
library. This can be used to determine what went wrong.
► If the keystore password is incorrect, the message will be
[java.io.IOException: Keystore was tampered with, or password was
incorrect]. An incorrect password is the most common cause of this error.
Verify the keystore password using the keytool command.
► The message [java.io.IOException: Algorithm IbmX509 not available]
indicates that the JSSE libraries are not installed correctly. This is caused by
not having the correct versions of ibmjsse.jar, ibmjcefw.jar, ibmjceprovider.jar
in the JDK’s ext directory.
► If the message CCL8403I SSLight libraries selected for use is output
earlier in the CICS TG log, and a JSSE keystore is being used, the JSSE
libraries are not installed in the JDK used by the CICS TG. The CCL6525E
message will be followed by [java.io.IOException: Keystore was tampered
with, or password was incorrect].