Problem installing gskit for 14.10.10FC11W1 on AIX
Milan Rafaj got Couldn't determine supported encryption library installing GSKit for 14.10.FC11W1 on AIX. Stopping TSD let GSKit 8.0.60.1 install, but oninit -V then failed with cannot set FIPS mode 1. Simon Riddle advised checking gskit.log and said the FIPS error seemed to conflict with TSD, which he did not know. The FIPS problem remained unresolved.
Auto-generated by Claude from the posts below — may be imperfect; read the full thread.
Hello, during installing gskit on AIX I got an error message: Couldn't determine supported encryption library current gskit version is 8.0.55.14 In install log is this: Execute Command: /informix/ifxserver.14.10.FC11W1X2/gskit/installgskit Status: SUCCESSFUL Status: FATAL ERROR Additional Notes: FATAL ERROR - Couldn't determine sup ported encryption library ERROR - Couldn't determine supported encryption library Custom Action: com.ibm.informix.install.isi.InstallEncryptionSupport Status: ERROR Additional Notes: ERROR - class com.ibm.informix.i nstall.isi.InstallEncryptionSupport.install() runtime exception: Custom Action: com.ibm.informix.install.NonRootScriptGeneration Status: SUCCESSFUL can someone help what could be a problem? Thanks a lot ------------------------------ Milan ------------------------------
Hello, now I am little bit further.
Our AIX has TSD configured, so I stopped TSD (gskit.log reports to switch some TSD policies off in order to install gskit).
Now gskit is installed (8.0.60.1)
but still there is an error at the end of ids_install.
Couldn't determine supported encryption library
I manually created link in $INFORDIR/lib:
lrwxrwxrwx 1 root system 19 6 dub 11:17 libisi.so.3 -> ./libisi_gsk.so.3.
but still oninit -V reports error
oninit -Vinitialization of libisi.so.3 failed
cannot set FIPS mode 1 (on)
(OpenSSL:152)
IBM Informix Dynamic Server Version 14.10.FC11W1X2DE
Thu Mar 27 06:15:16 CDT 2025
Anyone has an experience using AIX with TSD and Informix setting FIPS mode how to solve this problem?
Thank you
------------------------------
Milan
------------------------------
Hello Milan, The version if GSKit supplied with 14.10.FC11W1X2 is 8.0.60.1a so it would seem that the installation of gskit was not successful if the gsk8ver_64 command is reporting a lower version. Take a look at $INFORMIXDIR/tmp/gskit.log to see if it reports any errors. You might also want to try running the installgskit command, as root, in the $INFORMIXDIR/gskit directory. UPDATE My reply overlapped with your second posting and I see you have now updated your GSKit. As it suggests, the error from libisi "cannot set FIPS mode 1 (on)" relates to an attempt to enable FIPS mode within GSKit and that seems to conflict with TSD which I understand to be Trusted Signature Database. Unfortunately, I have no knowledge of that. Simon ------------------------------ Simon Riddle ------------------------------
Hello Simon. Thank you for a tip. I discovered the problem is related to TSD, finally I succeeded to install gsk8.0.60.1 but still have problem as libisi library has problem to switch FIPS mode when running oninit -V
Milan
Odesláno z iPadu