PI06268: GH PROXY FAILS TO START DUE TO CERTIFICATE EXPIRY

APAR status

• Closed as program error.

Error description

• The GH Proxy service fails to start.
  
  When run on the command-line the program fails with the
  following:
  
  SEVERE: Failed to start HTTP(S) proxy
  Throwable occurred:
  com.greenhat.vie.comms.proxy.util.ProxyRegistrationException:
  Invalid Certificate settings
          at
  com.greenhat.proxy.http.HTTPProxy.init(HTTPProxy.java:81)
          at com.greenhat.proxy.Main.main(Main.java:31)
  Caused by: java.security.cert.CertificateExpiredException:
  certificate expired on 20131027163621GMT+00:00
  

Local fix

• WORKAROUND:
  
  Disable the HTTPS proxy feature by commenting or removing the
  following section of registration.xml:
  
   <https-proxy
    port="3129" bind-address=""
    keyStoreFile="greenhat.jks" keyStoreType="jks"
    keyStoreAlias="mykey" keyStorePassword="passphrase"
    signingAlgorithm="SHA1withRSA" />
  
  The HTTP and TCP features will still function correctly.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of the GH Proxy packaged with GH Tester 5.4.x.     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Attempting to start the GH Proxy shipped with versions of GH *
  * Tester before 5.4.0.23 results in the error:                 *
  *                                                              *
  * SEVERE: Failed to start HTTP(S) proxy                        *
  * Throwable occurred:                                          *
  * com.greenhat.vie.comms.proxy.util.ProxyRegistrationException *
  * :                                                            *
  * Invalid Certificate settings                                 *
  *                                                              *
  * being shown.                                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Customers should upgrade their proxy to version              *
  * GHProxy-1.0.1.33752 which is available on the Green Hat      *
  * Tester IWM site.  They should either re-install the proxy    *
  * using this version or extract the certificate file from the  *
  * downloaded ZIP and copy it on top of an existing GH Proxy    *
  * installation.                                                *
  ****************************************************************
  

Problem conclusion

• This problem is caused because the certificate shipped with GH
  Proxy has expired.  This certificate is used when recording
  https traffic.
  
  The certificate has been updated and a new version of the proxy
  made available for download.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  GREEN HAT TESTE

• Fixed component ID

  5725G79GT

Applicable component levels

• R540 PSY

     UP