PH51918: AFTER UPGRADING TO 9.0.5.14 THE SERVER DOES NOT START WITH SSL ERRORS TO LDAP

APAR status

• Closed as program error.

Error description

• The following error is seen and the server will not start.
  Root exception is javax.net.ssl.SSLHandshakeException: PKIX path
  building failed:
  com.ibm.security.cert.IBMCertPathBuilderException: unable to
  find valid certification path to requested target
  

Local fix

• workaround is add the certificate in the error in systemOut.log
  to the NodeDefaultTruststore or CellDefaultTruststore
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Unable to connect to LDAP server when   *
  *                      when configured with a SSL reference.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The SSL configuration reference by the LDAP configuration is
  not
  being used for the connection to the LDAP server.  Making it
  not
  possible to access the LDAP user registry.
  

Problem conclusion

• The bug has been fixed. This APAR has been superseded by PH53876
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.24 and 9.0.5.15. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels