PH24846: AGENTCOMM.KEYSTORE.PASSWORD IS NOT GETTING ENCRYPTED FOR WEB RELAY.

APAR status

• Closed as program error.

Error description

• Web agent relays experiencing this defect do not consistently
  encrypt the value of the agentcomm.keystore.password property.
  
  Reproduction steps enumerated below:
  
  1. Install the relay and Communication Type as "WEB".
  
  2. Create the keystore by using below command on path
  $Relay_Install/conf/jms-relay
  
  $JAVA_HOME\jre\bin\keytool -genkey -alias mykey -keyalg RSA
  -keysize 2048 -sigalg SHA256withRSA -validity 365 -keypass
  privatepassword -keystore agentrelay.keystore -storepass
  password
  
  3. Change the below parameters in agentrelay.properties
  
  agentrelay.keystore.password=password
  
  agentrelay.cert.alias=mykey
  
  agentrelay.cert.password=privatepassword
  
  Add the below parameter
  agentcomm.keystore.password=password
  
  4. Restart the relay and open agnetrelay.properties file
  The agentcomm.keystore.password is not encrypted.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All end users on all supported browsers.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Web agent relays experiencing this defect do not             *
  * consistently                                                 *
  * encrypt the value of the agentcomm.keystore.password         *
  * property.                                                    *
  *                                                              *
  * Reproduction steps enumerated below:                         *
  *                                                              *
  * 1. Install the relay and Communication Type as "WEB".        *
  *                                                              *
  * 2. Create the keystore by using below command on path        *
  * $Relay_Install/conf/jms-relay                                *
  *                                                              *
  * $JAVA_HOME\jre\bin\keytool -genkey -alias mykey -keyalg RSA  *
  * -keysize 2048 -sigalg SHA256withRSA -validity 365 -keypass   *
  * privatepassword -keystore agentrelay.keystore -storepass     *
  * password                                                     *
  *                                                              *
  * 3. Change the below parameters in agentrelay.properties      *
  *                                                              *
  * agentrelay.keystore.password=password                        *
  *                                                              *
  * agentrelay.cert.alias=mykey                                  *
  *                                                              *
  * agentrelay.cert.password=privatepassword                     *
  *                                                              *
  * Add the below parameter                                      *
  * agentcomm.keystore.password=password                         *
  *                                                              *
  * 4. Restart the relay and open agnetrelay.properties file     *
  * The agentcomm.keystore.password is not encrypted.            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Fixed in version 7.1.0.1                                     *
  ****************************************************************
  

Problem conclusion

• Fix is provided in IBM UrbanCode Deploy 7.1.0.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels