IZ83684: JAVAX.NET.SSL.* PROPERTIES THAT ARE SPECIFIED IN THE CLI CONFIGURATION FILE ARE NOT USED AT RUNTIME

APAR status

• Closed as program error.

Error description

• The CLI can be fixed to use the values specified for the
  javax.net.ssl.* properties in the CLI configuration file
  (wsrrcli.conf by default).
  

Local fix

• Not applicable
  

Problem summary

• The default CLI configuration file includes the following
  properties:
  
  secure.javax.net.ssl.trustStore =
  <CLIENT_HOME>/etc/DummyClientTrustFile.jks
  secure.javax.net.ssl.keyStore =
  <CLIENT_HOME>/etc/DummyClientKeyFile.jks
  secure.javax.net.ssl.trustStorePassword = WebAS
  secure.javax.net.ssl.keyStorePassword = WebAS
  
  The values specified for these properties are ignored when
  running a CLI script.
  

Problem conclusion

• The code did not read the values from the SSL properties set in
  the configuration file. The SSL properties used when making a
  secure connection were those specified in the ssl.client.props
  file located by the value set for the following property:
  
  secure.com.ibm.SSL.ConfigURL=file:<CLIENT_HOME>/properties/ssl.c
  lient.props
  
  The code has now been updated to assign the values set for the
  SSL properties in the configuration file and these take
  precedence over the contents of ssl.client.props.
  
  This fix is targeted for inclusion in fix pack 3 for WSRR v7.0.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SRV REG REPO CL

• Fixed component ID

  5724N7201

Applicable component levels

• R700 PSY

     UP