Direct link to fix
APAR status
Closed as program error.
Error description
When you use an HTTP import binding with a forward proxy via the HTTPS protocol and SNI extension, the proxy host, instead of the correct target server host, might be used during SSL handshake, which might result in a connection failure. In that case, you receive the following error message: Hostname <proxy host> provided via SNI and hostname <target server host> provided via HTTP are different. PRODUCTS AFFECTED IBM Business Process Manager (BPM) Advanced
Local fix
disable SNI with Java argument: -Djsse.enableSNIExtension=false
Problem summary
This issue occurs because the SCA HTTP binding did not set a correct SSL property, causing the proxy host to be used during the SSL handshake.
Problem conclusion
A fix that sets the correct SSL property in an SCA HTTP binding when both of the JVM properties com.ibm.websphere.sca.http.pooling.hcm.useProxyEndpointInformati on and com.ibm.websphere.sca.http.pooling.hcm.UseURLHostForHostHeader are set to true is available for IBM BPM V8.6.0.0 cumulative fix 2018.03
Temporary fix
Not applicable.
Comments
APAR Information
APAR number
JR60217
Reported component name
BPM
Reported component ID
5737A5700
Reported release
860
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-10-29
Closed date
2022-12-15
Last modified date
2022-12-15
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
BPM
Fixed component ID
5737A5700
Applicable component levels
[{"Business Unit":{"code":"BU029","label":"Software"},"Product":{"code":"SS3PUM","label":"IBM Business Process Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.6.0.0"}]
Document Information
Modified date:
15 December 2022