That fixed it. Thanks for the info. Richard
-----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Kurt Quackenbush Sent: Thursday, January 23, 2025 5:00 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: [External] : Re: SMPE Internet Order > GIM69207S ** RECEIVE PROCESSING HAS FAILED BECAUSE THE CONNECTION WITH THE > SERVER FAILED. javax.net.ssl.SSLHandshakeException: > com.ibm.jsse2.util.ValidatorException: PKIX path building failed: > com.ibm.security.cert.IBMCertPathBuilderException: unable to find > valid certification path to requested target > GIM20501I RECEIVE PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12. > > All of my certs are still in place and valid. I have the Digicert cert and > my personal cert generated from Shopz. > > Has something changed that I missed, or is there an issue with IBM? Yes, something changed. The server certificate for the IBM server was set to expire soon, so it was replaced last week. Unfortunately, the replacement is issued by the "DigiCert Global Root G2'" root instead of the "DigiCert Global Root CA" root. Therefore, you need to connect the G2 root certificate to your keyring that also contains your certificate generated by Shopz. By the way, the IBM download servers already use certificates issued by the G2 root, so you likely already have the G2 root in your security manager database. The SMP/E doc will be updated and refreshed next week, but in the meantime if you need help adding the G2 root, you can find information in these two topics: https://urldefense.com/v3/__https://www.ibm.com/docs/en/zos/3.1.0?topic=certificates-displaying-certificate-authority__;!!ACWV5N9M2RV99hQ!KXi2ZNKA5CTs_Jd-Lik19WJw8JxL2VwfH5N_35jALBBqyEFjamYRvTaC9lnjMwdFcw3twTcj8oo_F0z6ug$ https://urldefense.com/v3/__https://www.ibm.com/docs/en/zos/3.1.0?topic=certificates-adding-certificate-authority__;!!ACWV5N9M2RV99hQ!KXi2ZNKA5CTs_Jd-Lik19WJw8JxL2VwfH5N_35jALBBqyEFjamYRvTaC9lnjMwdFcw3twTcj8opyHVHbvA$ Kurt Quackenbush IBM | z/OS SMP/E and z/OSMF Software Management | ku...@us.ibm.com Chuck Norris never uses CHECK when he applies PTFs. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
