Informix

Informix

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  Problem installing gskit for 14.10.10FC11W1 on AIX

    Posted Fri April 04, 2025 01:34 PM

    Hello,

    during installing gskit on AIX I got an error message:

    Couldn't determine supported encryption library

    current gskit version is 8.0.55.14

    In install log is this:

    Execute Command:          /informix/ifxserver.14.10.FC11W1X2/gskit/installgskit
                              Status: SUCCESSFUL
     
     
                              Status: FATAL ERROR
                              Additional Notes: FATAL ERROR - Couldn't determine sup
    ported encryption library
                                                ERROR - Couldn't determine supported
     encryption library
     
    Custom Action:            com.ibm.informix.install.isi.InstallEncryptionSupport
                              Status: ERROR
                              Additional Notes: ERROR -     class com.ibm.informix.i
    nstall.isi.InstallEncryptionSupport.install() runtime exception:
     
    Custom Action:            com.ibm.informix.install.NonRootScriptGeneration
                              Status: SUCCESSFUL

    can someone help what could be a problem?

    Thanks a lot



    ------------------------------
    Milan
    ------------------------------


  • 2.  RE: Problem installing gskit for 14.10.10FC11W1 on AIX

    Posted Sun April 06, 2025 05:45 AM

    Hello, now I am little bit further.

    Our AIX has TSD configured, so I stopped TSD (gskit.log reports to switch some TSD policies off in order to install gskit).

    Now gskit is installed (8.0.60.1)

    but still there is an error at the end of ids_install.

    Couldn't determine supported encryption library

    I manually  created link in $INFORDIR/lib:

    lrwxrwxrwx    1 root     system           19  6 dub 11:17 libisi.so.3 -> ./libisi_gsk.so.3.

    but still oninit -V reports error 

    oninit -V
    initialization of libisi.so.3 failed
    cannot set FIPS mode 1 (on)
    (OpenSSL:152)
    IBM Informix Dynamic Server Version 14.10.FC11W1X2DE
     Thu Mar 27 06:15:16 CDT 2025

    Anyone has an experience using AIX with TSD and Informix setting FIPS mode how to solve this problem?

    Thank you



    ------------------------------
    Milan
    ------------------------------



  • 3.  RE: Problem installing gskit for 14.10.10FC11W1 on AIX

    Posted Sun April 06, 2025 05:50 AM
    Edited by Simon Riddle Sun April 06, 2025 06:36 AM

    Hello Milan,

    The version if GSKit supplied with 14.10.FC11W1X2 is 8.0.60.1a so it would seem that the installation of gskit was not successful if the gsk8ver_64 command is reporting a lower version. Take a look at $INFORMIXDIR/tmp/gskit.log to see if it reports any errors. You might also want to try running the installgskit command, as root, in the $INFORMIXDIR/gskit directory.

    UPDATE

    My reply overlapped with your second posting and I see you have now updated your GSKit. As it suggests, the error from libisi "cannot set FIPS mode 1 (on)" relates to an attempt to enable FIPS mode within GSKit and that seems to conflict with TSD which I understand to be Trusted Signature Database. Unfortunately, I have no knowledge of that.  

    Simon



    ------------------------------
    Simon Riddle
    ------------------------------



  • 4.  RE: Problem installing gskit for 14.10.10FC11W1 on AIX

    Posted Tue April 08, 2025 09:58 AM
    Hello Simon. Thank you for a tip. I discovered the problem is related to TSD, finally I succeeded to install gsk8.0.60.1 but still have problem as libisi library has problem to switch FIPS mode when running oninit -V 



    Milan
    Odesláno z iPadu