APAR status
Closed as program error.
Error description
Security evaluation found that the Android client might try connection over HTTP if secure connection initially failed when registering the device for the first time. The change is to only attempt the secure connection by default. If this fails the end user is presented the option to attempt the connection over unsecure HTTP protocol if desired.
Local fix
Disable unsecure HTTP on the server.
Problem summary
The Notes Traveler client for Android devices would by default attempt registration of the device over SSL then if failed would also attempt over HTTP. This was done as convenience to the end user who often does not know which protocol the customer environment users.
Problem conclusion
With this change the Notes Traveler client will only attempt the secure connection by default. If this fails the end user has to explicitly indicate that they wish to connect over the unsecure HTTP protocol.
Temporary fix
This fix is already deployed in Notes Traveler Client 9.0.1.3 for Android devices on Google Play store. This level of client is also included in Notes Traveler Server 9.0.0.1 IF8 and 9.0.1 IF7 and later deliveries. See this technote for the latest maintenance release information: http://www.ibm.com/support/docview.wss?uid=swg24019529
Comments
APAR Information
APAR number
LO82635
Reported component name
LOTUS NOTES TRA
Reported component ID
5724E6204
Reported release
901
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2014-11-06
Closed date
2014-11-06
Last modified date
2014-11-06
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
LOTUS NOTES TRA
Fixed component ID
5724E6204
Applicable component levels
R901 PSY
UP
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSYRPW","label":"Lotus Notes Traveler"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0.1","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
06 November 2014