PH24845: WEB AGENT-RELAY IS NOT STARTING WHEN AGENTRELAY.KEYSTORE IS MODIFIED.

APAR status

• Closed as program error.

Error description

• For web Agent Relays, if the relay's keystore properties are
  changed, it can cause the the relay to fail on startup with the
  following exception:
  java.io.IOException: Keystore was tampered with, or password was
  incorrect
  
  This can be reproduced with the following steps:
  
  1. Install the relay and Communication Type as "WEB".
  
  2. Create the keystore by using below command on path
  $Relay_Install/conf/jms-relay
  
  $JAVA_HOME\jre\bin\keytool -genkey -alias mykey -keyalg RSA
  -keysize 2048 -sigalg SHA256withRSA -validity 365 -keypass
  privatepassword -keystore agentrelay.keystore -storepass
  password
  
  3. Change the below parameters in agentrelay.properties
  
  agentrelay.keystore.password=password
  
  agentrelay.cert.alias=mykey
  
  agentrelay.cert.password=privatepassword
  
  4. Restart relay. Below error occurrs
  
  2020-04-28 17:13:36,981 IST INFO AgentWorkerThread
  com.urbancode.air.agentrelay.AgentRelay - Connecting to servers:
  java.lang.RuntimeException: java.io.IOException: Keystore was
  tampered with, or password was incorrect
  

Local fix

• Add the below parameter in agentrelay.properties
  agentcomm.keystore.password=password
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All end users on all supported browsers.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * For web Agent Relays, if the relay's keystore properties are *
  * changed, it can cause the the relay to fail on startup with  *
  * the                                                          *
  * following exception:                                         *
  * java.io.IOException: Keystore was tampered with, or password *
  * was                                                          *
  * incorrect                                                    *
  *                                                              *
  * This can be reproduced with the following steps:             *
  *                                                              *
  * 1. Install the relay and Communication Type as "WEB".        *
  *                                                              *
  * 2. Create the keystore by using below command on path        *
  * $Relay_Install/conf/jms-relay                                *
  *                                                              *
  * $JAVA_HOME\jre\bin\keytool -genkey -alias mykey -keyalg RSA  *
  * -keysize 2048 -sigalg SHA256withRSA -validity 365 -keypass   *
  * privatepassword -keystore agentrelay.keystore -storepass     *
  * password                                                     *
  *                                                              *
  * 3. Change the below parameters in agentrelay.properties      *
  *                                                              *
  * agentrelay.keystore.password=password                        *
  *                                                              *
  * agentrelay.cert.alias=mykey                                  *
  *                                                              *
  * agentrelay.cert.password=privatepassword                     *
  *                                                              *
  * 4. Restart relay. Below error occurrs                        *
  *                                                              *
  * 2020-04-28 17:13:36,981 IST INFO AgentWorkerThread           *
  * com.urbancode.air.agentrelay.AgentRelay - Connecting to      *
  * servers:                                                     *
  * java.lang.RuntimeException: java.io.IOException: Keystore    *
  * was                                                          *
  * tampered with, or password was incorrect                     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Fixed in version 7.1.0.1                                     *
  ****************************************************************
  

Problem conclusion

• Fix is provided in IBM UrbanCode Deploy 7.1.0.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels