Configure GSKit to support .kdb files

  1. Check that GSKit 7a is installed
  2. Install the IBM JDK (for example, using the Eclipse development package)
  3. Set the JAVA_HOME environment variable to this setup
  4. Delete the following files in JAVA_HOME/jre if they exist :
    • lib/ext/ibmjsse.jar
    • lib/ext/gskikm.jar
    • lib/ext/ibmjcaprovider.jar (the ‘a’ is important)
  5. Check that the following files exist in JAVA_HOME/jre :
    • lib/ext/ibmjceprovider.jar
    • lib/ext/ibmpkcs.jar (or ibmpkcs11.jar)
    • lib/ibmjcefw.jar
    • lib/ext/ibmjcefips.jar (optional - for FIPS support)
    • lib/security/local_policy.jar
    • lib/security/US_export_policy.jar
    • lib/ibmpkcs11.jar (or ibmpkcs.jar)
  6. Edit JAVA_HOME/jre/lib/security/java.security to add IBM CMS and IBM JCE security providers, right after the SUN security provider. Examples :
security.provider.1=sun.security.provider.Sun
security.provider.2=com.ibm.spi.IBMCMSProvider
security.provider.3=com.ibm.crypto.provider.IBMJCE

security.provider.1=com.ibm.jsse.IBMJSSEProvider
security.provider.2=com.ibm.spi.IBMCMSProvider
security.provider.3=com.ibm.crypto.provider.IBMJCE
security.provider.2=com.ibm.crypto.provider.IBMJCE
security.provider.4=com.ibm.security.jgss.IBMJGSSProvider
security.provider.5=com.ibm.security.cert.IBMCertPath