PH37462: JAVAX.NET.SSL.KEYSTORE, JAVAX.NET.SSL.TRUSTSTORE PROPERTIES ARE NOT HONORED

APAR status

• Closed as program error.

Error description

• Depending on the timing, WebSphere may call JDK default
  SSLContext API before JDK reads javax.net.ssl.keyStore,
  javax.net.ssl.trustStore properties.  When it happens, the
  properties are not honored.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Customer application is setting the     *
  *                      java.net.ssl.truststore properties      *
  *                      and thier outbound SSL connection is    *
  *                      not using them.                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The customer is not using WAS's SSL for an outbound
  connection and expexts the application setting of the
  javax.net.ssl.* properties to be picked up.  The SSL code is
  doing something early in setup preventing the user
  javax.net.ssl.* properties from being used.
  

Problem conclusion

• The SSL initialize was making a call to get the JDK default
  SSLContext early in setup perventing the customers app from
  setting up it's own SSLContext with the javax.net.ssl.*
  properties.
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.21 and 9.0.5.9. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP