PH43825: SUPPORT URLENCODED STRING IN THE SSL CERTIFICATE.

APAR status

• Closed as new function.

Error description

• Client certificate with urlencoded string cannot be processed.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server version    *
  *                  8.5.5, 9.0.5 and Liberty users of           *
  *                  WebContainer.                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: A url-encoded client certificate        *
  *                      could not be processed.                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Some of the open source web proxy servers or load balancers
  use a client certificate in the PEM url-encoded format to send
  to the application server. This change was due to the
  deprecation of long lines folding in the HTTP header
  continuation.  The Liberty and WebSphere Application Server
  could not process any request with the url-encoded format
  certificate.
  The following exception might be related:
  SRVE8086E: Invalid peer certificate.
  

Problem conclusion

• The WebContainer code has been updated to support the
  url-encoded client certificate.
  
  This feature is currently targeted for inclusion in fixpack
  8.5.5.22, 9.0.5.12 and Liberty 22.0.0.1
  
  The github link can be found here:
  https://github.com/OpenLiberty/open-liberty/issues/11680
  
  For more information, see 'Recommended Updates for
  WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels