OA34527: HOD 11 CLIENTS ARE GETTING COM 662 WHEN USING NEW VERISIGN CERTIFICATES

Rational Host On-Demand 11.0.3
Rational Host On-Demand 11.0.9
Rational Host On-Demand 11.0.10
Rational Host On-Demand 11.0.11

APAR status

• Closed as program error.

Error description

• Verisign had some new root certificates which were added to
  HOD's WellKnownTrustedCAs.p12.  This file was accidentally
  regressed during the build process for another function.
  

Local fix

• Refer to this technote for a workaround.
  
  http://www-01.ibm.com/support/docview.wss?uid=swg21395269
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All Host On-Demand users using VeriSign      *
  *                 certificates                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: Verisign ICA (intermediate)             *
  *                      certificates are missing in latest      *
  *                      WellKnownTrustedCAs.p12 in HOD V11.0.   *
  *                      Clients trying to use the new root      *
  *                      certificates will receive a COM 662,    *
  *                      The server presented a certificate      *
  *                      that was not trusted.                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  A problem during the build process of HOD 11.0.2 regressed the
  WellKnownTrustedCAs.p12 file after the new Verisign root
  certificates were added.
  

Problem conclusion

• The correct WellKnownTrustedCAs.p12 was included in the HOD 11
  build process.
  
  Fix scheduled to be available in HOD 11.0.3 Refresh pack
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  HOD MVS

• Fixed component ID

  5733A5900

Applicable component levels

• RB00 PSY

     UP