Hello
I have a problem seen often but without a resolution from IBM.
a) I am running RHEL
/etc/redhat-release
Red Hat Enterprise Linux Server release 7.9 (Maipo)
b) We were running a TSM version where the DB2 and TSM version of the GSK matched.
DB2 GSK version at
/opt/ibm/db2/V11.1.3fp3a/gskit/bin/gsk8ver_64
version = V8.0.50.86
Pre TSM upgrade
rpm -qa | grep gsk
gskcrypt64-8.0-50.86.x86_64
gskssl64-8.0-50.86.x86_64
c) Now I upgraded TSM and GSK is at version that is newer
Post TSM Upgrade now at 8.0.55.21
rpm -qa | grep gsk
gskssl64-8.0-55.21.x86_64
gskcrypt64-8.0-55.21.x86_64
/usr/local/ibm/gsk8_64/bin/gsk8ver_64
/usr/bin/gsk8ver_64
/opt/ibm/db2/V11.1.3fp3a/gskit/bin/gsk8ver_64
I think I need to have all of these old files now be links to the new ones?
ls -l /opt/ibm/db2/V11.1.3fp3a/gskit/bin
total 28976
-r-xr-xr-x 1 bin bin 14681856 Apr 30 2018 gsk8capicmd
-r-xr-xr-x 1 bin bin 14964264 Apr 30 2018 gsk8capicmd_64
-r-xr-xr-x 1 bin bin 7800 Apr 30 2018 gsk8ver
-r-xr-xr-x 1 bin bin 10288 Apr 30 2018 gsk8ver_64
Here are the TSM NEW ones Note no 32 bit just all 64 bit
ls -l /usr/local/ibm/gsk8_64/bin
total 14604
-rwxr-xr-x 1 root sys 14938768 Feb 12 2021 gsk8capicmd_64
-rwxr-xr-x 1 root sys 9792 Feb 12 2021 gsk8ver_64
Ir I run dsmc as the DB2 instance owner OS defined then AND only then so I get an SSL error
ANS1592E Failed to initialize SSL protocol.
In the local error log as the DB2 user
01/30/2023 18:40:02 ANS1579E GSKit function gsk_attribute_set_buffer GSK_TLSV13_CIPHER_SPECS_EX failed with 701: GSK_ATTRIBUTE_INVALID_ID
01/30/2023 18:40:02 ANS9020E A session could not be established with a IBM Spectrum Protect server or client agent. The return code is -362.
01/30/2023 18:40:02 ANS1592E Failed to initialize SSL protocol.
Tried changing the old GSK to sof links pointitng to TSM but get same error?
How did others with Linux TSM clients and DB2 older version of GSK upgrade TSM?
I have a problem seen often but without a resolution from IBM.
a) I am running RHEL
/etc/redhat-release
Red Hat Enterprise Linux Server release 7.9 (Maipo)
b) We were running a TSM version where the DB2 and TSM version of the GSK matched.
DB2 GSK version at
/opt/ibm/db2/V11.1.3fp3a/gskit/bin/gsk8ver_64
version = V8.0.50.86
Pre TSM upgrade
rpm -qa | grep gsk
gskcrypt64-8.0-50.86.x86_64
gskssl64-8.0-50.86.x86_64
c) Now I upgraded TSM and GSK is at version that is newer
Post TSM Upgrade now at 8.0.55.21
rpm -qa | grep gsk
gskssl64-8.0-55.21.x86_64
gskcrypt64-8.0-55.21.x86_64
/usr/local/ibm/gsk8_64/bin/gsk8ver_64
/usr/bin/gsk8ver_64
/opt/ibm/db2/V11.1.3fp3a/gskit/bin/gsk8ver_64
I think I need to have all of these old files now be links to the new ones?
ls -l /opt/ibm/db2/V11.1.3fp3a/gskit/bin
total 28976
-r-xr-xr-x 1 bin bin 14681856 Apr 30 2018 gsk8capicmd
-r-xr-xr-x 1 bin bin 14964264 Apr 30 2018 gsk8capicmd_64
-r-xr-xr-x 1 bin bin 7800 Apr 30 2018 gsk8ver
-r-xr-xr-x 1 bin bin 10288 Apr 30 2018 gsk8ver_64
Here are the TSM NEW ones Note no 32 bit just all 64 bit
ls -l /usr/local/ibm/gsk8_64/bin
total 14604
-rwxr-xr-x 1 root sys 14938768 Feb 12 2021 gsk8capicmd_64
-rwxr-xr-x 1 root sys 9792 Feb 12 2021 gsk8ver_64
Ir I run dsmc as the DB2 instance owner OS defined then AND only then so I get an SSL error
ANS1592E Failed to initialize SSL protocol.
In the local error log as the DB2 user
01/30/2023 18:40:02 ANS1579E GSKit function gsk_attribute_set_buffer GSK_TLSV13_CIPHER_SPECS_EX failed with 701: GSK_ATTRIBUTE_INVALID_ID
01/30/2023 18:40:02 ANS9020E A session could not be established with a IBM Spectrum Protect server or client agent. The return code is -362.
01/30/2023 18:40:02 ANS1592E Failed to initialize SSL protocol.
Tried changing the old GSK to sof links pointitng to TSM but get same error?
How did others with Linux TSM clients and DB2 older version of GSK upgrade TSM?
