WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  WAS plugin not loading gsk library

    Posted Tue February 14, 2023 07:13 PM

    Hi all.

    I am testing ssl on my reverse proxy (Rocky Linux with httpd 2.4.53).  HTTP proxying works but I am getting errors when using HTTPS.

    From http_plugin.log:

    DEBUG: ws_transport: transportInitializeSecurity: transport=0x55b6cf21f9b0; GSKIT Library not yet loaded
    DEBUG: lib_security: loadSecurityLibrary: GSKIT Library not yet loaded
    DEBUG: updateOSLibpath(361): Linux updateOSLibpath LD_LIBRARY_PATH initially /opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib
    DEBUG: lib_security: loadSecurityLibrary (updateOSLibpath): security library loading from /opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib
    DEBUG: updateOSLibpath(503): Unix LD_LIBRARY_PATH newValue: /opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib
    DEBUG: updateOSLibpath(518): LD_LIBRARY_PATH updated value /opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib:/opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64:/usr/lib:/lib
    ERROR: loadSecurityLibrary(679): gsk load from /opt/IBM/WebSphere/Plugins/gsk8/gsk8_64 failed rc=0,
    ERROR: ws_transport: transportInitializeSecurity: Unable to load security library
    ERROR: ws_server: serverAddTransport: Failed to initialize security. Secure transports are not possible.

    I have a WebSphere.conf file with the following:

    SetEnv LD_LIBRARY_PATH /opt/IBM/WebSphere/Plugins/gsk8/gsk8_64/lib64

    This location exists; it is where the plugin is installed.  The server is 64 bit.  I have the key and stash files configured in the plugin-cfg.xml.

    I can't find any details on why the security library has failed to load.  Can anyone give me any possible reasons?



    ------------------------------
    thanks

    jc
    ------------------------------


  • 2.  RE: WAS plugin not loading gsk library
    Best Answer

    Posted Wed February 15, 2023 02:40 AM

    Hi Jer,

      Have you review this points?
      
      https://www.ibm.com/support/pages/ibm-web-server-plugin-may-need-ldlibrarypath-when-used-apache-web-server
      
      Hope this helps. Tell us if you need more support.
      

    Regards



    ------------------------------
    Gabriel Aberasturi
    Versia Sistemas TI
    ------------------------------

    Original Message


  • 3.  RE: WAS plugin not loading gsk library

    Posted Sun February 19, 2023 10:48 PM

    That did it, thanks Gabriel!  I had the environment variable set in WebSphere.conf in the apache conf.d directory (that was how our old Centos 7 box had it) and assumed that was enough.



    ------------------------------
    jer cos
    ------------------------------

    Original Message


  • 4.  RE: WAS plugin not loading gsk library

    Posted Wed February 15, 2023 10:09 AM

    There was a bug in the plugin code where it would falsely report failure and this looks like what you are hitting.  Do you see failures in secure connections also? You should try upgrading plugin to the latest fixpack (9.0.5.14).



    ------------------------------
    Elizabeth Riggins
    IBM
    9192953659
    ------------------------------

    Original Message


Related Content