IT26102: SSLPEERUNVERIFIEDEXCEPTION FROM SOAPREQUEST/HTTPREQUEST NODE IF HOSTNAME CHECKING IS ENABLED.

APAR status

• Closed as program error.

Error description

• If a proxy server is configured for the SOAPRequest/HTTPRequest
  node and SSL certificate hostname checking is enabled, then the
  proxy server name is taken for hostname comparison instead of
  webservice endpoint server name. This causes SSL connectivity
  failure with 'javax.net.ssl.SSLPeerUnverifiedException: SSL Peer
  certificate did not match host name' error.
  
  
  
  
  
  
  
  Additional Symptom(s) Search Keyword(s) :SOAPRequest,
  HTTPRequest, javax.net.ssl.SSLPeerUnverifiedException: SSL,
  certificate Peer certificate did not match host name' error.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM AppConnect Enterprise V11.0 and IBM Integration
  Bus V10.0 using the SOAPRequest or HTTPRequest node with proxy
  server and SSL certificate host name checking.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  If a http proxy server is configured for the
  SOAPRequest/HTTPRequest node and SSL certificate hostname
  checking is enabled, then the http proxy server name is taken
  for the certificate hostname comparison instead of webservice
  endpoint server name. This causes SSL connectivity failure with
  'javax.net.ssl.SSLPeerUnverifiedException: SSL Peer certificate
  did not match host name' error.
  

Problem conclusion

• The product now correctly carry out the certificate hostname
  check against the webservice endpoint server.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.15
  v11.0      11.0.0.3
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0540

Applicable component levels