From fcac82303f53ebc81b6033383e9ab3ba09b8ec77 Mon Sep 17 00:00:00 2001 From: Jakub Balhar Date: Thu, 12 Oct 2023 09:05:38 +0200 Subject: [PATCH 1/2] Update troubleshoot-apiml.md Fix the links to the configure certificates. Signed-off-by: Jakub Balhar --- .../version-v2.9.x/troubleshoot/troubleshoot-apiml.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/versioned_docs/version-v2.9.x/troubleshoot/troubleshoot-apiml.md b/versioned_docs/version-v2.9.x/troubleshoot/troubleshoot-apiml.md index 28d956c77e..f820c22105 100644 --- a/versioned_docs/version-v2.9.x/troubleshoot/troubleshoot-apiml.md +++ b/versioned_docs/version-v2.9.x/troubleshoot/troubleshoot-apiml.md @@ -263,13 +263,13 @@ Fix the missing z/OSMF host name in subject alternative names using the followin **Follow these steps:** 1. Obtain a valid certificate for z/OSMF and place it in the z/OSMF keyring. For more information, see [Configure the z/OSMF Keyring and Certificate](https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.izua300/izuconfig_KeyringAndCertificate.htm). -2. Re-create the Zowe keystore by deleting it and re-creating it. For more information, see [Configuring PKCS12 certificates](../user-guide/configure-certificates.md/#pkcs12-certificates-in-a-keystore). The Zowe keystore directory is the value of the `KEYSTORE_DIRECTORY` variable in the `zowe.yaml` file that is used to launch Zowe. +2. Re-create the Zowe keystore by deleting it and re-creating it. For more information, see [Configuring PKCS12 certificates](../user-guide/configure-certificates/#pkcs12-certificates-in-a-keystore). The Zowe keystore directory is the value of the `KEYSTORE_DIRECTORY` variable in the `zowe.yaml` file that is used to launch Zowe. #### Insecure fix **Follow these steps:** -1. Re-create the Zowe keystore by deleting it and re-creating it. For more information, see [Configuring PKCS12 certificates](../user-guide/configure-certificates.md/#pkcs12-certificates-in-a-keystore). +1. Re-create the Zowe keystore by deleting it and re-creating it. For more information, see [Configuring PKCS12 certificates](../user-guide/configure-certificates/#pkcs12-certificates-in-a-keystore). 2. In the `zowe-setup-certificates.env` file that is used to generate the keystore, ensure that the property `VERIFY_CERTIFICATES` and `NONSTRICT_VERIFY_CERTIFICATES` are set to `false`. **Important!** Disabling `VERIFY_CERTIFICATES` or `NONSTRICT_VERIFY_CERTIFICATES` may expose your server to security risks. Ensure that you contact your system administrator before disabling these certificates and use these options only for troubleshooting purposes. @@ -296,7 +296,7 @@ Request a new certificate that contains a valid z/OSMF host name in the subject #### Re-create the Zowe keystore -Re-create the Zowe keystore by deleting it and re-creating it. For more information, see [Configuring PKCS12 certificates](../user-guide/configure-certificates.md/#pkcs12-certificates-in-a-keystore). The Zowe keystore directory is the value of the `KEYSTORE_DIRECTORY` variable in the `zowe.yaml` file that is used to launch Zowe. +Re-create the Zowe keystore by deleting it and re-creating it. For more information, see [Configuring PKCS12 certificates](../user-guide/configure-certificates/#pkcs12-certificates-in-a-keystore). The Zowe keystore directory is the value of the `KEYSTORE_DIRECTORY` variable in the `zowe.yaml` file that is used to launch Zowe. ### API ML throws I/O error on GET request and cannot connect to other services @@ -447,7 +447,7 @@ The Zowe desktop is able to be displayed in a browser but fails to logon. **Solution:** -Check that the Zowe certificate has been configured as a client certificate, and not just as a server certificate. More detail can be found in [Configuring PKCS12 certificates](../user-guide/configure-certificates.md/#pkcs12-certificates-in-a-keystore) and [Configuring JCERACFS certificates in a key ring](../user-guide/configure-certificates.md/#jceracfks-certificates-in-a-key-ring). +Check that the Zowe certificate has been configured as a client certificate, and not just as a server certificate. More detail can be found in [Configuring PKCS12 certificates](../user-guide/configure-certificates/#pkcs12-certificates-in-a-keystore) and [Configuring JCERACFS certificates in a key ring](../user-guide/configure-certificates/#jceracfks-certificates-in-a-key-ring). ### Java z/OS components of Zowe unable to read certificates from keyring @@ -621,4 +621,4 @@ security.provider.12=JdkLDAP security.provider.13=JdkSASL security.provider.14=SunPKCS11 ``` -For more information see the steps in [Enabling the IBMZSecurity provider](https://www.ibm.com/docs/en/semeru-runtime-ce-z/11?topic=guide-ibmzsecurity#ibmzsecurity__enabling_z_provider__title__1). \ No newline at end of file +For more information see the steps in [Enabling the IBMZSecurity provider](https://www.ibm.com/docs/en/semeru-runtime-ce-z/11?topic=guide-ibmzsecurity#ibmzsecurity__enabling_z_provider__title__1). From 7a1b53be9d1359c7f14fc261f0f1bc5639e3399c Mon Sep 17 00:00:00 2001 From: Jakub Balhar Date: Thu, 12 Oct 2023 09:48:22 +0200 Subject: [PATCH 2/2] Fix links for 2.10 as well. Signed-off-by: Jakub Balhar --- .../version-v2.10.x/troubleshoot/troubleshoot-apiml.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/versioned_docs/version-v2.10.x/troubleshoot/troubleshoot-apiml.md b/versioned_docs/version-v2.10.x/troubleshoot/troubleshoot-apiml.md index 478d18488b..4b5615bb3b 100644 --- a/versioned_docs/version-v2.10.x/troubleshoot/troubleshoot-apiml.md +++ b/versioned_docs/version-v2.10.x/troubleshoot/troubleshoot-apiml.md @@ -296,7 +296,7 @@ Request a new certificate that contains a valid z/OSMF host name in the subject #### Re-create the Zowe keystore -Re-create the Zowe keystore by deleting it and re-creating it. For more information, see [Configuring PKCS12 certificates](../user-guide/configure-certificates.md/#pkcs12-certificates-in-a-keystore). The Zowe keystore directory is the value of the `KEYSTORE_DIRECTORY` variable in the `zowe.yaml` file that is used to launch Zowe. +Re-create the Zowe keystore by deleting it and re-creating it. For more information, see [Configuring PKCS12 certificates](../user-guide/configure-certificates/#pkcs12-certificates-in-a-keystore). The Zowe keystore directory is the value of the `KEYSTORE_DIRECTORY` variable in the `zowe.yaml` file that is used to launch Zowe. ### API ML throws I/O error on GET request and cannot connect to other services @@ -621,4 +621,4 @@ security.provider.12=JdkLDAP security.provider.13=JdkSASL security.provider.14=SunPKCS11 ``` -For more information see the steps in [Enabling the IBMZSecurity provider](https://www.ibm.com/docs/en/semeru-runtime-ce-z/11?topic=guide-ibmzsecurity#ibmzsecurity__enabling_z_provider__title__1). \ No newline at end of file +For more information see the steps in [Enabling the IBMZSecurity provider](https://www.ibm.com/docs/en/semeru-runtime-ce-z/11?topic=guide-ibmzsecurity#ibmzsecurity__enabling_z_provider__title__1).