We are trying to set up a CICS Web client call to DFHWBCLI in CICS TS 2.3 to make cics-cobol program web call to external non-cics web server. To setup the required Keyring for SSL (Secure Socket Layer) we used ts 2.3 SDFHSAMP(DFH$RING) and made no other modifications to the resulting Keyring definitions in RACF.
The process, however, is failing. Here is the *exc* trace entry:
SO 080C SOSE *EXC* - SYSTEM_SSL_ERROR GSK_RESPONSE(GSK_ERROR_UNKNOWN_CA) FUNCTION(SECURE_SOC_INIT) RESPONSE(EXCEPTION) REASON(CLIENT_ERROR) GSK_RETURN_CODE(FFFFFFED) CERTIFICATE_USERID() CIPHERS_SELECTED(1015C72200)
We suspect there is something amiss with the Keyring definition, but we are clueless as to what it might be.
My question:
How to tweek this to permit proper secure socket initialization?