IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  SSL error in patch installation

    Posted 02/09/23 02:33 PM
      |   view attached

    Hi everyone, today I went to do a patch update on one of my environments and I got the following error message:

    ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1) /opt/IBM/Guardium/scripts/register_patch.sh: line 196: [: -eq: unary expected operator SqlGuard-11.0p4048_Snif_Aug_10_2022.tgz.enc.sig NOT in AVAILABLE_PATCH.

    This is the first time that we have this error in our environment, as we have already installed patches on other occasions.

    I would like to know if anyone has a solution.

    Grateful.



    ------------------------------
    Frederico Menge
    ------------------------------


  • 2.  RE: SSL error in patch installation

    Posted 02/10/23 02:22 AM

    What is the current patch level?
    Why you try to install 405?
    If you on patch level 400 I strongly suggest install 9997 and 460 first.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------



  • 3.  RE: SSL error in patch installation

    Posted 04/17/23 09:23 AM
      |   view attached

    I also encountered a similar error.



    ------------------------------
    Tekena Alamina
    ------------------------------



  • 4.  RE: SSL error in patch installation

    Posted 04/17/23 09:38 AM

    Tekena,
    You might be encountering the mysql cert error.
    IBM Security Guardium internal MySQL certificate expiration
    It isn't obvious until you drill down into your environment a bit.
    Do you have a cert warning when you login to the GUI?
    I know when I was patching an environment with a cert error, I received SSL errors for patch commands, even database space commands.
    If your certificates have expired, you can open a ticket with support.  But this is what I did.
    I set the clock back to 4/1/2023 12:00 on all of the appliances in that environment and then applied the appropriate patches. Then I changed the time back. 
    Patch 4048 is pretty old.
    You need to be at p440 or later or apply p1018 to address the cert issue for version 11.4.
    Hope this helps.
    Jennifer



    ------------------------------
    Jennifer Dodson
    Data Protection Managed Services
    Converge Technology Solutions Corp.
    Formerly Information Insights LLC
    _____________
    m: 469.502.8850
    convergetp.com | Jennifer.Dodson@convergetp.com
    ------------------------------

    Original Message


Related Content