JES5: Calendar cannot start ssl

Question

I'm using JES5 and update patch for calendar.
Please help me.
# showrev -p |grep 121657
Patch: 121657-15 Obsoletes: 117706-08, 116577-36 Requires: Incompatibles: Packages: SUNWics5, SUNWica5
Patch: 121657-18 Obsoletes: 117706-08, 116577-43 Requires: Incompatibles: Packages: SUNWics5, SUNWica5
Patch: 121657-19 Obsoletes: 117706-08, 116577-43 Requires: Incompatibles: Packages: SUNWics5, SUNWica5
# certutil -L -d /var/opt/SUNWics5/alias
Server-Cert CTu,Cu,Cu
DEMO_CERT u,u,u
# cat /etc/opt/SUNWics5/config/sslpassword.conf
Internal (Software) Token:password
# tail http.log
[28/Feb/2008:14:01:06 +0700] mail cshttpd[7486]: General Error: http_ssl_init(): SSL initialization failed
[28/Feb/2008:14:01:08 +0700] mail cshttpd[7486]: General Notice: cshttpd is ready
# ics.conf #
encryption.rsa.nssslactivation �on�
encryption.rsa.nssslpersonalityssl �DEMO_CERT�
encryption.rsa.nsssltoken �internal�
service.http.tmpdir �/var/opt/SUNWics5/tmp�
service.http.uidir.path �html�
service.http.ssl.cachedir �.�
service.http.ssl.cachesize �10000�
service.http.ssl.certdb.password �password�
service.http.ssl.certdb.path �/var/opt/SUNWics5/alias�
service.http.ssl.port.enable �yes�
service.http.ssl.port �8443�
service.http.ssl.securelogin �yes�
service.http.securesession �yes�
service.http.ssl.sourceurl �https�//mail.demo.com:8443�
service.http.ssl.ssl2.ciphers ��
service.http.ssl.ssl2.sessiontimeout �0�
service.http.ssl.ssl3.ciphers "rsa_rc4_40_md5,rsa_rc2_40_md5,rsa_des_sha,rsa_rc4_128_md5,rsa_3des_sha"
service.http.ssl.ssl3.sessiontimeout �0�
service.http.sslusessl �yes�

Answer 1

truss result if using certutil command create database and generate a self-signd certificate
14390/1: stat("/var/opt/SUNWics5/alias/cert8.db", 0xFFBFD440) = 0
14390/1: open("/var/opt/SUNWics5/alias/cert8.db", O_RDONLY) = 23
14390/1: fcntl(23, F_SETFD, 0x00000001) = 0
14390/1: read(23, "\00615 a\0\0\002\0\010E1".., 260) = 260
14390/1: lseek(23, 16384, SEEK_SET) = 16384
14390/1: read(23, "\006 ?F7 ?F4 ?E3 ?A8 ? o".., 16384) = 16384
14390/1: stat("/var/opt/SUNWics5/alias/key3.db", 0xFFBFD500) = 0
14390/1: open("/var/opt/SUNWics5/alias/key3.db", O_RDONLY) = 24
14390/1: fcntl(24, F_SETFD, 0x00000001) = 0
14390/1: read(24, "\00615 a\0\0\002\0\010E1".., 260) = 260
14390/1: lseek(24, 8192, SEEK_SET) = 8192
14390/1: read(24, "\00E1FF91FF81FED1FDD1FCF".., 8192) = 8192
14390/1: stat("/var/opt/SUNWics5/alias/libnssckbi.so", 0xFFBFD2A8) = 0
14390/1: resolvepath("/var/opt/SUNWics5/alias/libnssckbi.so", "/var/opt/SUNWics5/alias/libnssckbi.so",
1023) = 37
14390/1: open("/var/opt/SUNWics5/alias/libnssckbi.so", O_RDONLY) = 25
14390/1: mmap(0x00010000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_ALIGN, 25, 0) = 0xFC510000
14390/1: mmap(0x00010000, 376832, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON|MAP_ALIGN, -1, 0) = 0xF
9020000
14390/1: mmap(0xF9020000, 105120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 25, 0) = 0xF9020
000
14390/1: mmap(0xF9048000, 209505, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 2
5, 98304) = 0xF9048000
14390/1: mmap(0xF9020000, 105120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_TEXT, 25, 0) = 0xF9020
000
14390/1: mmap(0xF9048000, 209505, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_INITDATA, 2
5, 98304) = 0xF9048000
14390/1: munmap(0xF903A000, 57344) = 0
14390/1: memcntl(0xF9020000, 39140, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
14390/1: close(25) = 0
14390/1: stat("/opt/SUNWics5/cal/lib/libc.so.1", 0xFFBFD178) Err#2 ENOENT
14390/1: munmap(0xFC510000, 8192) = 0
14390/1: brk(0x003A0850) = 0
14390/1: brk(0x003B2850) = 0
14390/1: open("/var/opt/SUNWics5/alias/sslpassword.conf", O_RDONLY) = 25
14390/1: read(25, " I n t e r n a l ( S o".., 255) = 35
14390/1: close(25) = 0
14390/1: lseek(23, 32768, SEEK_SET) = 32768
14390/1: read(23, "\0\b ?C9 ? t ? ; = = = -".., 16384) = 16384
14390/1: lseek(24, 16384, SEEK_SET) = 16384
14390/1: read(24, "\0\b1F801CBE1C >19 |18FC".., 8192) = 8192
14390/1: time() = 1204346872
14390/1: getpid() = 14390 [14378]
14390/1: fstat(3, 0xFFBFCFFC) = 0
14390/1: lseek(3, 0, SEEK_END) = 123610
Workaround after copy *.db of messaging server to /opt/SUNWics5/cal/config.
cert8.db, key3.db and secmod.db create and generate self-signed certificate from msgcert command.
I don't know why ssl does not work if generate certificate from certutil command of calendar.
But calendar ssl work if create and generate certificate from msgcert command of messaging.
1. copy *.db from messaging to calendar directory
2. chown icsuser:icsgroup *.db
3. configure ssl parameters in the ics.conf file
4. restart calendar service
Regards,
Chai.