|
|
|
|
|
The following are common SSL error messages:
Message 1
ACE_SSL (2372 | 1656) error code: 336151576 - error:14094418:SSL routines:SSL3_READ_BYTES:tlsvl alert unknown ca
Failed to register in the CORBA services.
Explanation: The GUI server fails to resolve a secure Naming Service. The -SSLCAfile parameter is not specified in the TAO configuration file, or it points to an invalid location.
Corrective Action: Determine which reason caused the failure and correct the problem.
Message 2
ACE_SSL (3632|2580) error code: 336134278 - error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Failed to register in the CORBA services.
Explanation: The GUI server fails to resolve a secure Naming Service for one of the following reasons:
The -SSLCAfile parameter is not specified in the TAO configuration file.
The -SSLCAfile parameter points to an invalid location.
The CA PEM file is corrupted.
The CA PEM file doesn't match the certificates used.
Corrective Action: Determine which reason caused the failure and correct the problem.
Message 3
Failed to register in the CORBA services.
Explanation: An attempt was made to connect to a non-secure Naming Service.
Corrective Action: Ensure that the attempted connection is to a secure Naming Service and ensure that the Naming Service was started as a secure Naming Service.
Message 4
ClientServerSSL.ini was not found at D:\ Program Files\BMC Software\Control-M EM 9.0.00\Default\ini\ssl
dynamic initialization failed for SSLIOP_Factory
(3868|2956) Unable to initialize the Service Configurator: Invalid argument
Failed to register in the CORBA services.
Explanation: The GUI server fails to initialize. The ClientServerSSL.ini file was not found in the <Control-M/EM Home Directory>/ini/ssl directory.
Corrective Action: Ensure that the ClientServerSSL.ini file is located in the <Control-M/EM Home Directory>/ini/ssl directory.
Message 5
Password decryption error.Key string file may be corrupted.: Unknown error dynamic initialization failed for SSLIOP_Factory
(1556|2364) Unable to initialize the Service Configurator: Invalid argument
Failed to register in the CORBA services.
Explanation: The GUI server fails to initialize. The ClientServerSSL.ini file is corrupted or contains a password that was encrypted using the wrong key.
Corrective Action: Ensure that the ClientServerSSL.ini file is not corrupted and contains a properly encrypted password.
Message 6
dynamic initialization failed for SSLIOP_Factory
(3868|3820) Unable to initialize the Service Configurator: Invalid argument
Failed to register in the CORBA services.
Explanation: The GUI server fails to initialize. The private or public key certificate was not found.
User Response: In both files <EM Home Directory>/etc/ssl_client_server.conf and <EM Home Directory>/etc/ssl_ns.conf, ensure that the -SSLPrivateKey parameter points to the file containing the private key. Ensure that the -SSLCertificate parameter points to the file containing the certificate. When using the demonstration certificates, the default values are:
-SSLPrivateKey 'PEM:/home/ctm_em/ini/ssl/CertDemoU_pk.pem'
-SSLCertificate'PEM:/home/ctm_em/ini/ssl/CertDemoU.pem'"
Message 7
TAO (2196|3224) Service Configurator unable to open file be D:\ Program Files\BMC Software\Control-M EM 9.0.00\Default\ini\ssl
(2196|3224) Unable to initialize the Service Configurator: Invalid argument
Failed to register in the CORBA services.
Explanation: The GUI server fails to initialize. The configuration file referenced in the -ORBSvcConf parameter was not found.
Corrective Action: Ensure that the file that is being pointed to exists in the specified location.
Parent Topic |