IBM Support

IC84993: DEFAULT SSL CONFIGURATION FOR WEB AND XML MANAGEMENT INTERFACES MISSING CA CERTIFICATES ON 9235 AND 4195 PLATFORMS

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The default SSL Proxy Profile for the Web and XML
Management Interfaces should contain one subject
certificate and two CA certificates.  In the 5.0.0.0 release on
the 9235 and 4195 platforms, the two CA certificates in this
default SSL Proxy Profile contain the wrong contents and the SSL
handshake will send only the subject certificate
instead of all three.

The SSL client attempting to make this connection might refuse
to validate the certificate chain because of this.

The 7198 and 7199 platforms are not affected by this problem.

Local fix

  • Configure an SSL Proxy Profile other than the default one for
the Web and XML Management Interfaces.

Problem summary

  • Users of 5.0.0.0 firmware on a 9235 or 4195 platform running
the Web or XML Management Interfaces using
their default SSL Proxy Profiles might experience certificate
validation problems with some SSL clients.

The problem is due to the SSL server in this default SSL Proxy
Profile failing to send two of the three certificates that it
should send.

Problem conclusion

  • The fix is available in 5.0.0.1.

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IC84993
    • 

  • Reported component name
    DATAPOWER
    • 

  • Reported component ID
    DP1234567
    • 

  • Reported release
    500
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2012-06-29
    • 

  • Closed date
    2012-06-29
    • 

  • Last modified date
    2012-08-24
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    DATAPOWER
    • 

  • Fixed component ID
    DP1234567
    • 



Applicable component levels


    

  • R500  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateway"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.0.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            11 February 2022
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback