So, there are a couple of certs needed. Obviously, your ShopZ generated cert on the keyring you specify in ORDERSERVER stanza, but then for secured FTP you do need the Digicert keys. At the behest of Kurt Q awhile back, I started using the "javatruststore" on the downloadkeyring statement in the CLIENT stanza for resolution of these Digicert certs. IBM JAVA support team supplies those certs as part of the JAVA distribution, so nothing to put on any SAF keyrings for that.
javahome="/opt/fitb/java/Jre" classpath="/usr/lpp/smp/classes" downloadmethod="ftp" downloadkeyring="javatruststore"> -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Ed Jaffe Sent: Saturday, August 25, 2018 12:57 PM To: [email protected] Subject: SMP/E RECEIVE ORDER Certificates **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** We have the DigiCert CA and G2 certificates added to our SMPKEYRING. Nevertheless, last night our RECEIVE ORDER jobs failed with: GIM69207S ** RECEIVE PROCESSING HAS FAILED BECAUSE THE CONNECTION WITH THE SERVER FAILED. javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; interna cause is: ..java.security.cert.CertPathValidatorException: The certificate issued by CN=GeoTrust Glob GIM20501I RECEIVE PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12. Are we the only ones? Is there something else that must be done other than what's documented in this PDF? http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/FLASH10884 -- Phoenix Software International Edward E. Jaffe 831 Parkview Drive North El Segundo, CA 90245 https://www.phoenixsoftware.com/ -------------------------------------------------------------------------------- This e-mail message, including any attachments, appended messages and the information contained therein, is for the sole use of the intended recipient(s). If you are not an intended recipient or have otherwise received this email message in error, any use, dissemination, distribution, review, storage or copying of this e-mail message and the information contained therein is strictly prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of this email message and do not otherwise utilize or retain this email message or any or all of the information contained therein. Although this email message and any attachments or appended messages are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by the sender for any loss or damage arising in any way from its opening or use. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
