WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  SSL authentication error

    Posted 12/24/20 11:23 AM

    Liberty is running inside CICS 5.4 on z/OS

    Trying to add a remote liberty server in Eclipse

    After I enter the user credentials and server hostname and https port#

    I am seeing error on server side:

    CWWKO0801E: Unable to initialize SSL connection. Unauthorized access

    Client authentication is not enabled on server side

    (clientAuthenticationSupported="false")

    How do I make it work?



    #Support
    #SupportMigration
    #WebSphereLiberty


  • 2.  RE: SSL authentication error

    Posted 12/24/20 10:49 PM

    Hi there! You may use the following steps to resolve this issue.

    Let's Start with SSL/TLS Certificates.

    1. Correct the Date and Time on your Android Device.
    2. Clear Browsing Data from Chrome.
    3. Change your WiFi Connection.
    4. Disable the Antivirus.
    5. Restart your Device.

    These steps should fix the error you're receiving. If it still fails to work for you. You may ask again. I'll be happy to help you further!

    Best Regards

    woodyman



    #Support
    #SupportMigration
    #WebSphereLiberty


  • 3.  RE: SSL authentication error

    Posted 12/25/20 08:25 AM

    Ecplise is installed on Windows 10. (why Android ?)



    #Support
    #SupportMigration
    #WebSphereLiberty


  • 4.  RE: SSL authentication error

    Posted 12/31/20 09:28 AM

    No other thoughts on how to add a z/Os Liberty server to Eclipse installed on Windows 10 ?



    #Support
    #SupportMigration
    #WebSphereLiberty


  • 5.  RE: SSL authentication error

    Posted 01/07/21 11:38 AM

    As I said, the issue is connecting from Eclipse on Windows to Liberty on z/OS.

    After looking at the SSL trace I see the following sequence on the client side:

    --------------------------------------------------------------------------------------

    * CertificateRequest

    Cert Types: RSA, DSS, ECDSA

    Cert Authorities:

    <CN=C54WLP Sample Certification Authority, OU=C54WLP, O=IBM>

    <CN=START1, OU=C54WLP, O=IBM>

    update handshake state: unknown[13]

    upcoming handshake states: server_hello_done[14]

    upcoming handshake states: client certificate[11](optional)

    upcoming handshake states: client_key_exchange[16]

    upcoming handshake states: certificate_verify[15](optional)

    upcoming handshake states: client change_cipher_spec[-1]

    upcoming handshake states: client finished[20]

    upcoming handshake states: server change_cipher_spec[-1]

    upcoming handshake states: server finished[20]

    check handshake state: server_hello_done[14]

    update handshake state: server_hello_done[14]

    upcoming handshake states: client certificate[11](optional)

    upcoming handshake states: client_key_exchange[16]

    upcoming handshake states: certificate_verify[15](optional)

    upcoming handshake states: client change_cipher_spec[-1]

    upcoming handshake states: client finished[20]

    upcoming handshake states: server change_cipher_spec[-1]

    upcoming handshake states: server finished[20]

    * ServerHelloDone

    Warning: no suitable certificate found - continuing without client authentication

    * Certificate chain

    <Empty>

    *

    ----------------------------------------------------------------------------------------------

    Not sure what "Warning: no suitable certificate found - continuing without client authentication"

    in fact means?

    The cert <CN=START1, OU=C54WLP, O=IBM> sent by the server is self signed and the CA cert used to sign it was added to the TrustStore on the client side by Keytool.



    #Support
    #SupportMigration
    #WebSphereLiberty