[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: HTTP ssl_error(6003): (GSKit) Access to the key database is not allowed
Thank you Paul and Charles for the timely responses. I've implemented those authority changes and we will see what happens tonight...
Thanks,
Kevin
-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Charles Wilt
Sent: Wednesday, May 21, 2014 7:08 AM
To: HTTPAPI and FTPAPI Projects
Subject: Re: HTTP ssl_error(6003): (GSKit) Access to the key database is not allowed
The readme member in LIBHTTP/QRPGLESRC includes a section "GRANTING ORDINARY USERS PERMISSION TO RUN SSL APPLICATIONS "
Follow the direction there.
Charles
On Wed, May 21, 2014 at 9:35 AM, Kevin Wengert <kevin@xxxxxxxxxxxxxxxxxx>wrote:
> Hi all,
>
>
> I've got a program that has been running for months without issues
> sending orders via HTTP using SSL. Yesterday, the IT manager for my
> client changed the night manager's user profile from GRPPRF(QPGMR) to
> GRPPRF(PRINTSTART) and the orders are now getting the error HTTP
> ssl_error(6003): (GSKit) Access to the key database is not allowed.
> PRINTSTART is a profile he created for his users that would have the
> authority to start printers.
>
>
> I know the easy answer is to change the profile back to GRPPRF(QPGMR)
> to solve my problem but the IT manager would rather not give his users
> that much authority. Does anyone know another way around the error in
> the debug log below?
>
>
>
> HTTPAPI Ver 1.24 released 2012-01-23
>
> OS/400 Ver
> V6R1M0
>
>
>
> New iconv() objects set, PostRem=819. PostLoc=0. ProtRem=819.
> ProtLoc=0
>
> http_url_post():
> entered
>
> http_persist_open():
> entered
>
> http_long_ParseURL():
> entered
>
> DNS resolver retrans:
> 2
>
> DNS resolver retry :
> 2
>
> DNS resolver options:
> x'00000136'
>
> DNS default domain:
> XXXXXX.COM
>
> DNS server found:
> 10.0.0.19
>
> DNS server found: 10.0.0.60
>
> DNS server found:
> 10.0.0.26
>
> https_init():
> entered
>
> (GSKit) Access to the key database is not
> allowed.
>
> ssl_error(6003): (GSKit) Access to the key database is not
> allowed.
>
> SetError() #24: gsk_env_init: (GSKit) Access to the key database is not
> allowed.
>
> http_url_post(): entered
>
> http_persist_open():
> entered
>
> http_long_ParseURL():
> entered
>
> DNS resolver retrans: 2
>
> DNS resolver retry :
> 2
>
> DNS resolver options:
> x'00000136'
>
> DNS default domain: XXXXXX.COM
>
> DNS server found:
> 10.0.0.19
>
> DNS server found:
> 10.0.0.60
>
> DNS server found:
> 10.0.0.26
>
> https_init():
> entered
>
> (GSKit) Access to the key database is not
> allowed.
>
> ssl_error(6003): (GSKit) Access to the key database is not
> allowed.
>
> SetError() #24: gsk_env_init: (GSKit) Access to the key database is not
> allowed.
>
> http_url_post():
> entered
>
> http_persist_open():
> entered
>
> http_long_ParseURL():
> entered
>
> DNS resolver retrans:
> 2
>
> DNS resolver retrans:
> 2
>
> DNS resolver retry :
> 2
>
> DNS resolver options:
> x'00000136'
>
> DNS default domain:
> XXXXXX.COM
>
> DNS server found:
> 10.0.0.19
>
> DNS server found:
> 10.0.0.60
>
> DNS server found:
> 10.0.0.26
>
> https_init():
> entered
>
> (GSKit) Access to the key database is not
> allowed.
>
> ssl_error(6003): (GSKit) Access to the key database is not
> allowed.
>
> SetError() #24: gsk_env_init: (GSKit) Access to the key database is not
> allowed.
>
> ************End of
> Data********************
>
>
> Thanks,
>
>
> Kevin Wengert
>
>
> Mobile: 480.298.5988
>
> Toll Free: 888.298.5988
>
> eFax: 866.747.2741
>
>
> [1]Kevin@xxxxxxxxxxxxxxxxxx
>
> [2]www.Logistix-world.com
>
>
> [3]cid:image001.jpg@01CA8C9D.E852E020
>
> References
>
> 1. mailto:Kevin@xxxxxxxxxxxxxxxxxx
> 2. http://www.logistix-world.com/
> 3. http://www.logistix-world.com/
>
> ----------------------------------------------------------------------
> - This is the FTPAPI mailing list. To unsubscribe, please go to:
> http://www.scottklement.com/mailman/listinfo/ftpapi
> ----------------------------------------------------------------------
> -
>
>
-----------------------------------------------------------------------
This is the FTPAPI mailing list. To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------