PH57709: ENCOUNTERING 407, GSK_ERROR_BAD_KEYFILE_LABEL WHEN USING THE ITX HTTP ADAPTER

APAR status

• Closed as program error.

Error description

• When using the IBM Transformation Extender (ITX) HTTP adapter
  with the secure option (https) the following error may be
  received - "No certificate was sent as per
  gsk_attribute_get_cert_info (LOCAL, rc = 407,
  GSK_ERROR_BAD_KEYFILE_LABEL)"
  

Local fix

• ITXCQ - ITX00062105
  PB / GK
  Circumvention: None
  

Problem summary

• Users Affected:
  IBM Transformation Extender users using HTTP/S, looking to
  connect to a gateway Server that is hosting different virtual
  hosts, such as on the Red Hat OpenShift platform
  
  Problem Description:
  The HTTP/S adapter did not support the TLS negotiation with
  Server Name Indication (SNI).
  
  Platforms Affected:
  All
  

Problem conclusion

• Server Name Indication is supported, when negotiating a TLS
  connection with a Server endpoint.
  
  Applies to:
  10.1.1.1, 10.1.2.0, 11.0.0.0
  
  Fixed in the next service packs and releases.
  
  To obtain the fix for this APAR:
  
  To see if the next service pack or product release is available,
  check the IBM Transformation Extender Release Notes page:
  https://www.ibm.com/support/docview.wss?uid=swg27008337
  
  If the service pack or product release is available, download it
  from Fix Central:
  http://www.ibm.com/support/fixcentral/
  
  If the service pack or product release is not available and you
  require the APAR fix immediately, request a Limited Availability
  Interim Fix (LAIF) by opening a case:
  https://www.ibm.com/mysupport/
  
  Prior to version 9.0.0, IBM Transformation Extender was called
  IBM WebSphere Transformation Extender.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ITX

• Fixed component ID

  5724Q2300

Applicable component levels