PH33497: JMS AGENTS CONFIGURED USING MUTUAL AUTHENTICATION CAN NOT BE CONVERTED TO WEB AGENTS

APAR status

• Closed as program error.

Error description

• JMS Agents that use mutual authentication with the Server can
  not be converted to WEB agents.
  
  When using mutual authentication between Server and Agents
  an Upgrade message is sent to the Agent, but the Agent will not
  be converted to a WEB Agent.
  
  Errors in Agent's log depending on Java version and vendor -
  Caused by: java.lang.RuntimeException:
  javax.net.ssl.SSLHandshakeException:
  sun.security.validator.ValidatorException: PKIX path building
  failed:
  sun.security.provider.certpath.SunCertPathBuilderException:
  unable to find valid certification path to requested target
  
  Caused by: javax.net.ssl.SSLHandshakeException:
  com.ibm.jsse2.util.h: PKIX path building failed:
  java.security.cert.CertPathBuilderException: unable to find
  valid certification path to requested target
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All end users on all supported browsers.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * JMS Agents that use mutual authentication with the Server    *
  * can                                                          *
  * not be converted to WEB agents.                              *
  *                                                              *
  * When using mutual authentication between Server and Agents   *
  * an Upgrade message is sent to the Agent, but the Agent will  *
  * not                                                          *
  * be converted to a WEB Agent.                                 *
  *                                                              *
  * Errors in Agent's log depending on Java version and vendor - *
  * Caused by: java.lang.RuntimeException:                       *
  * javax.net.ssl.SSLHandshakeException:                         *
  * sun.security.validator.ValidatorException: PKIX path         *
  * building                                                     *
  * failed:                                                      *
  * sun.security.provider.certpath.SunCertPathBuilderException:  *
  * unable to find valid certification path to requested target  *
  *                                                              *
  * Caused by: javax.net.ssl.SSLHandshakeException:              *
  * com.ibm.jsse2.util.h: PKIX path building failed:             *
  * java.security.cert.CertPathBuilderException: unable to find  *
  * valid certification path to requested target                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Fixed in version 7.1.2.0                                     *
  ****************************************************************
  

Problem conclusion

• Fix is provided in IBM UrbanCode Deploy 7.1.2.0
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels