PH61821: SET -SAN_DNSNAME AND SERVERNAME IN BIN/QUICKSSL.{SH,BAT}

APAR status

• Closed as program error.

Error description

• Self-signed certificates created by the IHS archive install
  bin/quickssl.{sh,bat} do not have a SAN DNSName nor a ServerName
  in httpd.conf.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server archive        *
  *                  installs                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: self-signed certificate created by      *
  *                      bin/quickssl.{sh,bat} does not include  *
  *                      a                                       *
  *                      SAN DNSName.                            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  self-signed certificate created by bin/quickssl.{sh,bat} does
  not
  include a SAN DNSName.
  

Problem conclusion

• The scripts were updated to set the system hostname as a SAN
  DNSName.
  
  The fix for this APAR is targeted for inclusion in IBM HTTP
  Server fix packs 9.0.5.21. For more information, see 'Recommende
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM HTTP SERVER

• Fixed component ID

  5724J0801

Applicable component levels