IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  IAG error in Kubernetes

    Posted 09/07/20 07:13 AM
    Hello,

    I deployed IAG in docker and it worked very well. Now I am trying to do it in Kubernetes and when I try to access via browser I get this error:

    2020-09-07-09:40:23.768+00:00I----- 0x38AD54CB iag WARNING wiv ssl WsSslListener.cpp 1398 0x7fa792573700
    DPWIV1227W IAG could not establish a secure connection with an incoming client. If client certificate authentication is not enabled check the IAG server certificate (Function call: gsk_secure_soc_init; failed error: 0x19a GSK_ERROR_BAD_MESSAGE;10.48.2.1;-).

    Config file is the same from docker (I didn't add server tag). 

    Service is a LoadBalancer in port 8443.

    Can you help me?

    ------------------------------
    Javier Garcia Pazos
    ------------------------------


  • 2.  RE: IAG error in Kubernetes

    Posted 09/08/20 01:15 AM
    Javier,

    You usually get the GSK_ERROR_BAD_MESSAGE error when you attempt to access the HTTPS interface of IAG using HTTP.  I would double check your environment and ensure that the request which is being sent to the container is actually a HTTPS/TLS request and not a HTTP request.

    I hope that this helps.


    ------------------------------
    queScott Exton
    IBM
    Gold Coast
    ------------------------------



  • 3.  RE: IAG error in Kubernetes

    Posted 09/08/20 02:14 AM
    Hello Scott,

    you are right. I was clicking on a link and I didn't realize about that. 

    Regards and sorry for the inconveniences

    ------------------------------
    Javier Garcia Pazos
    ------------------------------