IT24724: UNABLE TO SET THE SSL PARAMETERS WHEN USING INTEGRATION API.

APAR status

• Closed as program error.

Error description

• If you create an IntegrationNodeConnectionParameters using the
  host/port arguments and not the .broker file version then
  this is no way of setting the SSL protocols or suites.
  This APAR will provide a java property to enable the protocols
  and suites for the Integration Node connection.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM Integration Bus using the Integration API with
  SSL.
  
  
  Platforms affected:
  Windows on x86-64 platform, Linux on x86-64 platform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  If you use a constructor of the
  IntegrationNodeConnectionParameters class that takes host/port
  arguments and not a .broker file then there is no way to set the
  SSL protocol or cipher suites.
  
  This APAR will provide a java property to enable the protocols
  and cipher suites for the Integration Node connection.
  
  To set the protocol, set the following java property:
  -D
  com.ibm.broker.config.proxy.overrideDefaultSSLProtocol="TLSv1.2"
  
  To set the Cipher Suites, set the following Java property:
  -D
  com.ibm.broker.config.proxy.overrideDefaultSSLCipherSuites="SSL_
  RSA_WITH_AES_128_CBC_SHA256"
  

Problem conclusion

• The Integration API now allows users to set the protocol and
  cipher suite to be used for the SSL connection to the
  Integration Node.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.13
  v11.0      11.0.0.1
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0540

Applicable component levels