IBM i Global

 View Only
  • 1.  DCM QycdRenewCertificate API Error

    Posted 2 days ago

    I'm attempting to use the QycdRenewCertificate to renew a certificate stored in DCM, using the RNWC0300 format.

    The API call is failing with a CPF3CF2 escape message. The exception data portion of the error code parameter simple says "qycu_renewCertificate : RC=331 API". I've hunted high and low for some documentation on the return code values but I can't find anything.

    Does anyone know how I can find out what RC=331 means?



    ------------------------------
    Richard Moulton
    ------------------------------


  • 2.  RE: DCM QycdRenewCertificate API Error

    IBM Champion
    Posted 16 hours ago

    I'm afraid I can't give you an answer to your questions as asked - but have you looked at 
    Jesse Gorzinski's DCM tools to see if you could save yourself from writing code?  Cert renewal is one of the options. https://github.com/ThePrez/DCM-tools



    ------------------------------
    Jon Paris
    ------------------------------



  • 3.  RE: DCM QycdRenewCertificate API Error

    Posted 6 hours ago

    Hi Jon

    Yes, I tried using DCM tools a while back but couldn't get the `dcmrenew` command to work.

    I raised an issue here https://github.com/ThePrez/DCM-tools/issues/43.

    It would be really helpful if the API error gave an meaningful message of the problem rather than simply a return code or the API documentation specified what the return codes meant. Just looking for a clue here, any clue.

    My hope is that an IBMer sees this and takes pity on an old IBM i developer!



    ------------------------------
    Richard Moulton
    ------------------------------



  • 4.  RE: DCM QycdRenewCertificate API Error

    Posted an hour ago

    The built in RSE API has DCM things in it:
    Introducing RSE API (ibm.com)

    New REST APIs to manage digital certificates (ibm.com)



    ------------------------------
    Bryan Dietz
    ------------------------------



  • 5.  RE: DCM QycdRenewCertificate API Error

    Posted an hour ago

    Hi Bryan

    Yes, I did have a look at the documentation for the new APIs but they don't appear to support certificate renewal. At least not in the documentation I found.



    ------------------------------
    Richard Moulton
    ------------------------------