PI64351: HOST NAMES FOR PHYSICAL TRANSPORTS ARE CASE-SENSITIVE, CAUSING TLS NEGOTIATIONS TO FAIL .

Rational Performance Test Server 9.0.1
Rational Integration Tester 9.0.1
Rational Test Virtualization Server 9.0.1
Rational Integration Tester 9.1
Rational Test Virtualization Server 9.1
Rational Performance Test Server 9.1

APAR status

• Closed as program error.

Error description

• Tested in RIT 9.0
  In order to test I did this:
  
  1. Create an HTTPS transport for www.gooGLe.co.uk
  2. Switch on SSL and test connection works with the default
  "trust all"
  3. Now export the certificate from that site from your browser
  and save it.
  4. Create a new Identity Store and import this cert.
  5. Change the transport and set "Server certificates to trust"
  to be your Identity Store.
  6. Now test connections fails with:
  
  [CRRIT1707E] Could not create a connection to the HTTP server :
  java.security.cert.CertificateException: The names on the
  security certificate: "[www.google.co.uk]" do not match the name
  of the site "WWW.gooGle.CO.uk"
  
  JC confirms that this is a defect and can see why in the code.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of Rational Integration Tester working with host   *
  * names for physical transports                                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Host names for physical transports are case-sensitive,       *
  * causing TLS negotiations to fail.                            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to Rational Integration Tester v9.0.1 which includes *
  * a fix for this issue                                         *
  ****************************************************************
  

Problem conclusion

• A fix for this issue was provided in version 9.0.1 of Rational
  Integration Tester.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL INTEGRA TE

• Fixed component ID

  5725G79IT

Applicable component levels

• R800 PSN

     UP

• R801 PSN

     UP

• R850 PSN

     UP

• R851 PSN

     UP

• R860 PSN

     UP

• R870 PSN

     UP

• R871 PSN

     UP

• R900 PSN

     UP

• R901 PSY

     UP