PH57047: THE SERVER FAILS TO START UP WHEN IBMJCEPLUS PROVIDER IS NOT CONFIGURED IN JAVA.SECURITY FILE

APAR status

• Closed as program error.

Error description

• The server fails to start with the following or similar error.
  
  
  [10/18/23 10:03:19:633 CDT] 0000010e JSSEHelper    <  The
  following exception occurred in getSSLSocketFactory(). Exit
  
  java.lang.IllegalArgumentException: No cryptographic provider
  to support protocol TLSv1.3
  	at com.ibm.jsse2.bf$l.<clinit>(bf$l.java:7)
          ...
  	at
  sun.security.jca.GetInstance.getInstance(GetInstance.java:176)
  	at javax.net.ssl.SSLContext.getInstance(SSLContext.java:13)
  	at
  com.ibm.ws.ssl.config.SSLConfigManager.addTLS13(SSLConfigManager
  .java:3742)
  	at
  com.ibm.ws.ssl.config.SSLConfigManager.getProtocolList(SSLConfig
  Manager.java:3724)
  	at
  com.ibm.ws.ssl.config.FIPSUtils.getProtocolTypes(FIPSUtils.java:
  328)
  

Local fix

• Manually add IBMJCEPlus provider (Please update)
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All IBM i users of IBM WebSphere            *
  *                  Application                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: Start-up failure on IBM i platform, if  *
  *                      IBMJCEPlus provider is not present in   *
  *                      java.security file.                     *
  ****************************************************************
  * RECOMMENDATION:  Manually add IBMJCEPlus provider in         *
  *                  the java.security file.                     *
  ****************************************************************
  The default java.security file did not include IBMJCEPlus
  provider for WebSphere 8.5.5 on IBM i. TLSv1.3 is included as
  a default protocol. To enable it, the IBMJCEPlus provider
  needs to be available.
  

Problem conclusion

• Updated java.security file with the IBMJCEPlus
  provider on the IBM I operating system.
  
  The fix for this APAR is targeted for inclusion in fix pack
  version 8.5.5.25. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels