PI31900: SSL SNI NOT WORKING

IBM MobileFirst Platform Foundation Interim Fix README for 6.3

APAR status

• Closed as program error.

Error description

• Problem Description :
  In Worklight version 6.3 SSL SNI not working.
  the following error will be shown :
  
  Http request failed: javax.net.ssl.SSLException: hostname in
  certificate didn't match: <vhost-requested> != <vhost-default>
  
  Additional Keywords :
  SSL,SNI
  
  
  Versions affected:
  6.3
  Initial impact :
  medium
  Local fix :
  No local fix provided
  

Local fix

• No local fix provided
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Worklight customers using name-based virtual hosts as their  *
  * backend, with SSL, with a different certificate for each     *
  * virtual host.                                                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Calls from Worklight to one of the virtual hosts (the        *
  * default host) work fine, but calls to the other virtual      *
  * hosts fail with the error:                                   *
  * Http request failed: javax.net.ssl.SSLException: hostname in *
  * certificate didn't match: <host1> != <host2>.                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• Worklight was fixed to use API that sends the necessary
  information (server name).
  This will only work when working with Java 7.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WL/MFPF CONSUME

• Fixed component ID

  5725I4301

Applicable component levels

• R630 PSY

     UP