IT26922: The -expiry flag to the listcert command on the IBM MQ Applianceis only honored if no expiry time is supplied

APAR status

• Closed as program error.

Error description

• "listcert -m <QM> -expiry" with no value correctly displays the
  expiry of all certificates. However, if a numeric value is
  supplied
  after -expiry, it is expected that the expiry be listed against
  the displayed certs ONLY if the expiry falls within that number
  of days.  On the appliance, the number of days is not being
  passed through to the underlying cryptographic libraries, and so
  no expiries are displayed if any value is supplied after the
  "-expiry" flag.
  

Local fix

• Omit the expiryTime when using listcert -expiry to view
  certificate expiration information.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  This affects users of the MQ Appliance who use the listcert
  command
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  A logic error when parsing arguments to the listcert command
  meant that the expiry time (if specified) was not correctly
  passed to the underlying cryptographic libraries
  

Problem conclusion

• The MQ Appliance listcert command has been updated to correctly
  process the expiry time argument.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.1 CD    9.1.2
  v9.1 LTS   9.1.0.2
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ APPL M20

• Fixed component ID

  5725Z0900

Applicable component levels