Posted: Tue Oct 15, 2019 11:15 am Post subject: Does certificate update in IIB needs node restart?
Chevalier
Joined: 31 Mar 2006 Posts: 411 Location: New York
Greetings.
I updated our expiring signer chain in our IIB node's truststore, and did an mqsireload of the execution groups where https service flow run. Our client is a Datapower gateway that sends https requests to the https port. But it keeps failing with "sslv3 alert certificate unknown".
What could I have missed? Is it necessary to restart the whole IIB node? I also did a securityreload on the IIB node level, to no avail.
I also wonder where is the log for https' ssl failure from client, in IIB node. there isn't anything in the user.log, except mqsireload successful entries.
Any insight would be appreciated. _________________ pcelari
-----------------------------------------
- a master of always being a newbie
If it is at integration server level then yes refreshing the integration server should pick up the updates, but if at node level i guess node restart may be required.
See the below link on how to collect the JSSE trace to see ssl error details
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum