JR63450: DBUPGRADE FAILS WHEN THE DATABASE SERVER IS CONFIGURED TO ONLY ACCEPT TLS 1.2

8.6.10019003-WS-BPM-MultiOS-IFJR63450
8.6.10019003-WS-BPM-WinX3264-IFJR63450
workflow.2102.delta.repository

APAR status

• Closed as program error.

Error description

• If the database server is configured to "only accept the TLS1.2
  connection", then you meet the following exception when you run
  the DBUpgrade command:
  
  [Feb 25, 2021 12:15:23 PM] 00000001 SEVERE:
  com.lombardisoftware.utility.WLELoggerUtils.log - CWLLG2015E:
  An unexpected runtime exception occurred. See exception for more
  details.  Error: The driver could not establish a secure
  connection to SQL Server by using Secure Sockets Layer (SSL)
  encryption. Error: "SQL Server did not return a response. The
  connection has been closed.
  ClientConnectionId:a475b34d-c7f4-4910-8a75-5bee0b40df63"..
  com.microsoft.sqlserver.jdbc.SQLServerException: The driver
  could not establish a secure connection to SQL Server by using
  Secure Sockets Layer (SSL) encryption. Error: "SQL Server did
  not return a response. The connection has been closed.
  ClientConnectionId:a475b34d-c7f4-4910-8a75-5bee0b40df63".
   at
  com.microsoft.sqlserver.jdbc.SQLServerConnection.terminate(SQLSe
  rverConnection.java:2826)
   at
  com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL(IOBuffer.java:
  1829)
   at
  com.microsoft.sqlserver.jdbc.SQLServerConnection.connectHelper(S
  QLServerConnection.java:2391)
   at
  com.microsoft.sqlserver.jdbc.SQLServerConnection.login(SQLServer
  Connection.java:2042)
   at
  com.microsoft.sqlserver.jdbc.SQLServerConnection.connectInternal
  (SQLServerConnection.java:1889)
   at
  com.microsoft.sqlserver.jdbc.SQLServerConnection.connect(SQLServ
  erConnection.java:1120)
   at
  com.microsoft.sqlserver.jdbc.SQLServerDriver.connect(SQLServerDr
  iver.java:700)
   at
  com.ibm.bpm.config.util.db.JdbcHelper.getConnection(JdbcHelper.j
  ava:748)
   at
  com.lombardisoftware.tools.dbupgrade.ant.LoadDataSourceInfoTask.
  execute(LoadDataSourceInfoTask.java:257)
  

Local fix

• Add -Dcom.ibm.jsse2.overrideDefaultTLS=true to the java command
  in DBUpgrade.bat/sh.
  

Problem summary

• No additional information is available.
  

Problem conclusion

• A fix is available or will be available that ensure DBUpgrade
  success when only accept TLS 1.2 is configured.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BUS AUTO WORKFL

• Fixed component ID

  5737H4100

Applicable component levels