IBM Support

IT04962: B2B: WHEN DATAPOWER B2B GATEWAY SENDS AN UNSIGNED MESSAGE THE MIC IS CALCULATED USING SHA1 HASH FUNCTION

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • If outbound message is not signed, DataPower uses SHA1 algorithm
    to calculate the Message Disposition Notification Message
    Integrity Check (MDN MIC) leaving a potential for MDN MIC
    mismatch.
    

Local fix

Problem summary

  • Affected is the use of B2BGateway to send AS2 message to
    external partner and request an async signed MDN.  DataPower
    uses the first algorithm configured in the AS2 destination
    setting of partner profile.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    IT04962

  • Reported component name

    DATAPOWER

  • Reported component ID

    DP1234567

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-10-21

  • Closed date

    2015-01-09

  • Last modified date

    2015-02-09

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DATAPOWER

  • Fixed component ID

    DP1234567

Applicable component levels

  • R700 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateway"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
11 February 2022