IT46164: SERVER IS NOT SENDING ACCEPTABLE CLIENT CERTIFICATE CA NAMES FORMUTUAL AUTHENTICATION

APAR status

• Closed as program error.

Error description

• When mutual authentication is enabled, server is not sending
  Acceptable client certificate CA names field showing the list of
  certificate authorities which are accepted by the server from
  the client.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  <span style="background-color:#ffffff">All users of IBM App
  Connect Enterprise v12 and v13 using HTTPS listener.</span>
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  When a client requests an App Connect Enterprise HTTPS listener
  set up for mutual authentication, the server will not send
  accepted client certificate CA names during the handshake.
  

Problem conclusion

• Product is modified such that HTTPS listener will send
  "Acceptable client certificate CA names" list when a client
  makes a request.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v12.0      12.0.12.8
  v13.0      13.0.2.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0560

Applicable component levels