PI14520: CUSTOM PKI BRIDGE DEPLOYMENT MAY FAIL

Download for IBM Worklight V6.1.0 Fix Pack 2

APAR status

• Closed as program error.

Error description

• Custom PKI (Public Key Infrastructure) bridge deployment may
  fail with the following error
  being logged:
  
  Worklight Console initialization failed.Logged Exception:
  java.lang.RuntimeException: Property 'pki-bridge-class'
  in realm 'wl_userCertificateAuthRealm'Could not find class pki
  bridge name specified
  

Local fix

• Change server.xml and add the jar file which includes the custom
  PKI
  bridge class
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Worklight developers developing a custom PKI bridge for user *
  * certificate authentication while using the Worklight studio  *
  * environment.                                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When building a custom PKI (Public Key Infrastructure)       *
  * bridge for user certificate authentication, the class        *
  * definition in authenticationConfig.xml for the PKI Bridge    *
  * may be valid, but will fail finding the custom PKI bridge    *
  * class when using the embedded Liberty server. This exception *
  * can be seen in the logs:                                     *
  *                                                              *
  * ?Worklight Console initialization failed.Logged Exception:   *
  * java.lang.RuntimeException: property 'pki-bridge-class' in   *
  * realm 'wl_userCertificateAuthRealm' Could not find class pki *
  * bridge name specified?                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• The code was modified to attempt to load the custom PKI bridge
  class using more than one class loader. By attempting the load
  with a different class loader, the PKI Bridge can now be
  correctly located when using the Worklight studio embedded
  development server.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WORKLIGHT ENTER

• Fixed component ID

  5725I4300

Applicable component levels

• R610 PSY

     UP