IT49132: EMBEDDED GLOBAL CACHE MTLS REPLICATION FAILS WITH BIP9028W WHEN USING PASSPHRASE-PROTECTED PRIVATE KEYS

APAR status

• Closed as program error.

Error description

• When configuring mutual TLS (mTLS) for embedded global cache
  replication with passphrase-protected private keys in PKCS12 or
  PEM format, cache replication fails with error message:
  BIP9028W: The Global Cache failed to replicate a write operation
  to server '<server_name>'.
  The cause was 'Problem with the local SSL certificate'.
  

Local fix

• NA
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM App Connect Enterprise V13 who have configured
  embedded Global Cache with mTLS (mutual TLS) using
  passphrase-protected private keys for cache replication between
  integration servers.
  
  
  Platforms affected:
  AIX, WinX64, LinuxZ64, LinuxPPCLE64, LinuxX64
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  When mTLS is configured with passphrase-protected private keys
  for embedded Global Cache, the cache replication fails with
  BIP9028W: The Global Cache failed to replicate a write operation
  to server '<server_name>'.   The cause was 'Problem with the
  local SSL certificate'.
  

Problem conclusion

• Cache replication now correctly handles passphrase-protected
  private keys and Global Cache data replicates properly across
  integration servers.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version   Maintenance Level
  v13.0      13.0.7.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0570

Applicable component levels