As I said, the issue is connecting from Eclipse on Windows to Liberty on z/OS.
After looking at the SSL trace I see the following sequence on the client side:
--------------------------------------------------------------------------------------
* CertificateRequest
Cert Types: RSA, DSS, ECDSA
Cert Authorities:
<CN=C54WLP Sample Certification Authority, OU=C54WLP, O=IBM>
<CN=START1, OU=C54WLP, O=IBM>
update handshake state: unknown[13]
upcoming handshake states: server_hello_done[14]
upcoming handshake states: client certificate[11](optional)
upcoming handshake states: client_key_exchange[16]
upcoming handshake states: certificate_verify[15](optional)
upcoming handshake states: client change_cipher_spec[-1]
upcoming handshake states: client finished[20]
upcoming handshake states: server change_cipher_spec[-1]
upcoming handshake states: server finished[20]
check handshake state: server_hello_done[14]
update handshake state: server_hello_done[14]
upcoming handshake states: client certificate[11](optional)
upcoming handshake states: client_key_exchange[16]
upcoming handshake states: certificate_verify[15](optional)
upcoming handshake states: client change_cipher_spec[-1]
upcoming handshake states: client finished[20]
upcoming handshake states: server change_cipher_spec[-1]
upcoming handshake states: server finished[20]
* ServerHelloDone
Warning: no suitable certificate found - continuing without client authentication
* Certificate chain
<Empty>
*
----------------------------------------------------------------------------------------------
Not sure what "Warning: no suitable certificate found - continuing without client authentication"
in fact means?
The cert <CN=START1, OU=C54WLP, O=IBM> sent by the server is self signed and the CA cert used to sign it was added to the TrustStore on the client side by Keytool.
#Support#SupportMigration#WebSphereLiberty