IT26175: HTTPINPUT NODE DOES NOT PUT CLIENT CERTIFICATE DETAILS INTO THE LOCALENVIRONMENT TREE WHEN AUTHORIZATION HEADER IS PRESENT

APAR status

• Closed as program error.

Error description

• When client authentication is enabled, a user may validly expect
  to see the client certificate details under the following path
  in a message  tree propagated out of HTTPInput node :
  
  LocalEnvironment.HTTP.Input.TransportSecurity.ClientAuth.Certifi
  cate
  
  However, if you have an Authorization header in the request
  message (eg BasicAuth header), the certificate details
  are missing from the LocalEnvironment path
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM App Connect Enterprise v11 and IBM Integration
  Bus v10.0, using web services configured for SSL client
  authentication.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  When client authentication is enabled, a user may validly expect
  to see the client certificate details under the following path
  in a message  tree propagated out of the HTTPInput node :
  
  LocalEnvironment.HTTP.Input.TransportSecurity.ClientAuth.Certifi
  cate
  
  However, if you have an Authorization header in the request
  message (e.g. BasicAuth header), the certificate details are
  missing from the LocalEnvironment path
  

Problem conclusion

• The HTTPInput node will no longer fail to place the client
  certificate details in the LocalEnvironment tree.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.17
  v11.0      11.0.0.5
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0540

Applicable component levels