PH38655: WAS 9.0.5.7 + EJB THIN CLIENT JARS NOT RECOGNISING TLSV1.3 PROTOCOL

APAR status

• Closed as program error.

Error description

• Unable to connect to WAS 9.0.5.7 ND / SDK 8.0.6.30 from EJB Thin
  Client with Sun JDK using Protocol TLSv1.3.
  This was previously working with TLSv1.2.
  Customer is using the following jars attached to the case:
  com.ibm.ws.ejb.thinclient_9.0.jar
  com.ibm.ws.orb_9.0.jar
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Thin clients running on an Oracle JVM   *
  *                      failed to allow TLSv1.3 protocol to be  *
  *                      used.                                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Due to a check in the code to look for the IBMJCEPlus jar file,
  thin clients running on Oracle JDK would fail to allow user to
  run
  with TLSv1.3
  

Problem conclusion

• The code was reworked such that the check for the IBMJCEPlus
  provider was removed and verifying that TLSv1.3 could be used on
  any JVM.
  
  The fix for this APAR is targeted for inclusion in fix pack
  9.0.5.10 and 8.5.5.21. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels