IT42363: DOCUMENT UPDATE: TLS CONNECTIONS IN ACE USE OPENSSL AND NOT JAVA.

APAR status

• Closed as documentation error.

Error description

• Update the documentation page - https://www.ibm.com/docs/en/ap
  p-connect/12.0?topic=migration-behavioral-changes-in-version-120
  
  1. Under the "Review the following changes to see how your
  post-migration development tasks might be affected:" task add
  one more topic as TLS functionality change.
  2. As description for the topic add the below lines:
  "App Connect Enterprise (ACE) uses OpenSSL and Java Secure
  Socket Extension (JSSE) for the securing connectivity over HTTP,
  SOAP, and REST. The Integration Node HTTP listener and the
  embedded listener in the Integration Servers use OpenSSL for
  inbound (server) connections. The HTTPRequest and SOAPRequest
  nodes use JSSE for outbound (client) connections."
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All Users of IBM App Connect Enterprise V11 and V12 who uses
  HTTPS message flows in their application.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  Multiple HTTPS message flows were failing after migration from
  IBM Integration Bus v10 to App Connect Enterprise V12 due to the
  change in TLS functionality from Java in IIB v10 to OpenSSL in
  ACE. The OpenSSL does not load certificates with MD5 signature
  algorithm which is considered as insecure.
  

Problem conclusion

• The change in TLS functionality for inbound SSL connections are
  updated in the behavioral changes page under migration
  documentation for both App Connect Enterprise V11 and V12.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels