IT07549: STERLING SECURE PROXY WON'T START DUE TO "INCORRECT PASSPHRASE".

3.4.2.0-SterlingSecureProxy-AIX-if0002
3.4.2.0-SterlingSecureProxy-HP-IA-if0002
3.4.2.0-SterlingSecureProxy-Linux-if0002
3.4.2.0-SterlingSecureProxy-SolarisSPARC-if0002
3.4.2.0-SterlingSecureProxy-Windows-if0002
3.4.2.0-SterlingSecureProxy-Linux_s390-if0002
3.4.2.0-SterlingSecureProxy-AIX-if0004
3.4.2.0-SterlingSecureProxy-HP-IA-if0004
3.4.2.0-SterlingSecureProxy-Linux_s390-if0004
3.4.2.0-SterlingSecureProxy-Linux-if0004
3.4.2.0-SterlingSecureProxy-SolarisSPARC-if0004
3.4.2.0-SterlingSecureProxy-Windows-if0004
3.4.2.0-SterlingSecureProxy-AIX-if0005
3.4.2.0-SterlingSecureProxy-HP-IA-if0005
3.4.2.0-SterlingSecureProxy-Linux_s390-if0005
3.4.2.0-SterlingSecureProxy-Linux-if0005
3.4.2.0-SterlingSecureProxy-SolarisSPARC-if0005
3.4.2.0-SterlingSecureProxy-Windows-if0005

APAR status

• Closed as program error.

Error description

• Sterling Secure Proxy won't start due to "incorrect
  passphrase".  The security.properties file contains the
  following settings as described here:
  # Licensed Materials - Property of IBM
  # IBM Sterling Secure Proxy
  # (c) Copyright IBM Corp.  2003, 2011 All Rights Reserved.
  # US Government Users Restricted Rights - Use, duplication or
  disclosure restricted by GSA ADP Schedule Contract with IBM
  Corp.
  #
  ## DO NOT DELETE THIS FILE
  FIPS_MODE=false
  bootstrap.passphrase = true
  prompt.passphrase.at.startup = false
  prompt.passphrase.at.shutdown = false
  After executing startEngine.sh, the following error is shown in
  the startEngine.out:
  Exception in thread "main" java.lang.RuntimeException: Incorrect
  passphrase
          at com.sterlingcommerce.hadrian.security.CryptorTool.
  updateSelfBootStrapFile(CryptorTool.java:1026)
          at com.sterlingcommerce.hadrian.Main.main(Main.java:209)
  

Local fix

Problem summary

• After changing the passphrase for the engine or configuration
  manager, it may fail to start with the error: Exception in
  thread 'main' java.lang.RuntimeException:Incorrect passphrase.
  This error will occur if the encrypted password happens to
  contain the newline character as the first byte.
  

Problem conclusion

• The code has been changed to correctly handle encrypted
  passphrases with the newline character as the first byte.
  

Temporary fix

• Fix for RTC 457005
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR SECURE PROX

• Fixed component ID

  5725D0300

Applicable component levels

• R342 PSY

     UP