PM53438: EXTRANEOUS PROPERTY WRITTEN TO THE SECURITY.XML WHEN UPDATING SSL JSSE ENTRY

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Extranenous property being written to the security.xml file when
  JSSE entry is changed.
  
     <properties xmi:id="Property_1320082454404" name="600"
     value=""/>
  
  To recreate:
  
  Admin Console -> SSl Certificate and Key Management -> SSL
  Configuration and updates one of the JSSE entry
  
  When the apply button is hit (with no changes made) the extra
  property is written to the security.xml file.
  
  Security.xml before:
  
  Security-pre.xml
  
  
    <repertoire xmi:id="SSLConfig_1"
  alias="CellDefaultSSLSettings"
      managementScope="ManagementScope_1">
      <setting xmi:id="SecureSocketLayer_1"
  clientAuthentication="false"
      securityLevel="HIGH" enabledCiphers=""
  jsseProvider="IBMJSSE2"
      sslProtocol="SSL_TLS" keyStore="KeyStore_1"
  trustStore="KeyStore_2"
      trustManager="TrustManager_1" keyManager="KeyManager_1"/>
    </repertoire>
  
  
  
  Secutiry.xml after:
  
    <repertoire xmi:id="SSLConfig_1"
  alias="CellDefaultSSLSettings"
      managementScope="ManagementScope_1">
      <setting xmi:id="SecureSocketLayer_1"
  clientAuthentication="false"
      securityLevel="HIGH" enabledCiphers=""
  jsseProvider="IBMJSSE2"
      sslProtocol="SSL_TLS" keyStore="KeyStore_1"
  trustStore="KeyStore_2
      trustManager="TrustManager_1" keyManager="KeyManager_1">
     <properties xmi:id="Property_1320082454404" name="600"
  value=""/>
     </setting>
    </repertoire>
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V7.0 using the administrative        *
  *                  console to modify a SSLConfig               *
  ****************************************************************
  * PROBLEM DESCRIPTION: An extraneous property is written to    *
  *                      the config file when updating an        *
  *                      SSLConfig object.                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  There is code that sets the timeout value incorrectly as an
  extraneous property.
  

Problem conclusion

• Removed code that was incorrectly writing the extraneous
  property.
  
  APAR PM53438 is currently targeted for inclusion in Service
  Level (Fix Pack) 7.0.0.23 of WebSphere Application Server V7.0
  
  Please refer to URL:
  //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM51902

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R700 PSY UK78616

     UP12/05/26 P F205

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.