PI32509: OPTION TO REENABLE SSLV3 DOES NOT WORK

IBM MobileFirst Platform Foundation Interim Fix README for 6.3
IBM Worklight Interim Fix README for 6.2.0.1
IBM Worklight Interim Fix README for 6.1.0.2
IBM Worklight Interim Fix README for 6.0.0.2

APAR status

• Closed as program error.

Error description

• Even when using the JVM options
  -Dcom.ibm.worklight.disableSSLv3=false
  and
  -Dcom.ibm.jsse2.disableSSLv3=false
  some outgoing HTTPS connections to servers that support only
  SSLv3 (and not TLSv1.0 or newer) fail.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Administrators of Worklight Server that is running with an   *
  * IBM JRE and who are using the JVM property                   *
  * -Dcom.ibm.worklight.disableSSLv3=false                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * An error message occurs, either                              *
  * "javax.net.ssl.SSLHandshakeException: Server chose           *
  * unsupported or disabled protocol: SSLv3" or                  *
  * "javax.net.ssl.SSLHandshakeException: Server chose SSLv3,    *
  * but that protocol version is not enabled or not supported by *
  * the client."                                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  The enabled SSL protocols on the socket are not being set as
  expected.
  

Problem conclusion

• The code was fixed to set the enabled SSL protocols as needed.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WL/MFPF CONSUME

• Fixed component ID

  5725I4301

Applicable component levels

• R505 PSY

     UP

• R506 PSY

     UP

• R600 PSY

     UP

• R610 PSY

     UP

• R620 PSY

     UP

• R630 PSY

     UP