IBM Support

WebSphere Application Server plugin fails to open plugin-key.kdb file with gsk 406 error.

Flashes (Alerts)


Abstract

WebSphere Application Server IHS plugin cannot open the plugin-key.kdb file that is created with Java 8 SR5 and later.

After the CMS provider is updated to version 6.0 or later, GSKIT APIs cannot open the plugin-key.kdb file that is created by WebSphere. The issue is observed on the IBM i platforms running Java 8 SR5 (and later) with Websphere v8.5.5.24 (or earlier) or Websphere v9.0.5.18 (or earlier).

Content

PROBLEM DESCRIPTION: 

The WebSphere Application Server IHS plugin issues the following error when it attempts to read the plugin-key.kdb file that is generated on WebSphere v8.5.5.24 (and earlier) or WebSphere v9.0.5.18 (and earlier)
ERROR: lib_security: logSSLError: str_security (gsk error 406):  Error occurred in TLS processing, check the errno value.
ERROR: lib_security: initializeSecurity: Failed to initialize GSK environment. Secure transports are not possible.

An attempt to open the plugin-key.kdb file produces the following error:
 
Unable to open plugin-key.kdb
Status 0x0335300a - Database is not valid.
SOLUTION:
To prevent this issue, download and install the WebSphere Interim Fixes provided based on your WebSphere version.
WebSphere v8.5.5.xx    8.5.5.0-WS-WAS-IFPH57998
WebSphere v9.0.5.xx   9.0.5.0-WS-WAS-IFPH57998
Resolving the Problem:
WebSphere is unable to serve webpages with HTTP error 500. Follow the instructions outlined in the instructions here:

How to resolve HTTP500/GSK406 SSL errors between IHS and Websphere Application Server on the IBM i
Download Package
The Interim Fix is targeted for inclusion in fix packs 8.5.5.25 and 9.0.5.19.  
For more information, see Recommended Updates for WebSphere Application Server:
https://www.ibm.com/support/pages/node/715553
 
IMPORTANT NOTE:
WebSphere Application Server and Liberty fix access requires S&S Entitlement beginning in 2021. Use properly registered IDs to download the fixes in this table. 

Signature file is provided along with interim fix. See Verifying WebSphere Application Server release packages and Verifying Liberty release packages.
 
DOWNLOAD RELEASE DATE SIZE(Bytes)
APPLICABLE
FIX PACKS

URL

8.5.5.0-WS-WAS-IFPH57998 20 December 2023 301641 8.5.5.0 through 8.5.5.24 FC
9.0.5.0-WS-WAS-IFPH57998 20 December 2023 293510 9.0.5.0 through 9.0.5.18 FC
Note: FC stands for Fix Central. Review the What is Fix Central (FC)? FAQs for more details.

[{"Type":"MASTER","Line of Business":{"code":"LOB67","label":"IT Automation \u0026 App Modernization"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"8.5.5;9.0.5"},{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0;7.4.0;7.5.0"}]

Document Information

Modified date:
01 February 2024

UID

ibm17111862