PI50804: ANDROID M APPS FAIL TO CONNECT WHEN FIPS ENABLED

IBM MobileFirst Platform Foundation Interim Fix README for 7.1
IBM MobileFirst Platform Foundation Interim Fix README for 7.0
IBM MobileFirst Platform Foundation Interim Fix README for 6.3
IBM Worklight Interim Fix README for 6.2.0.1
IBM Worklight Interim Fix README for 6.1.0.2

APAR status

• Closed as program error.

Error description

• When an network request is sent through FIPS the following error
  will occur: Curl perform failed: problem with the SSL CA cert
  (path? access rights?)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Application developers who will use FIPS optional feature in *
  * MobileFirst Foundation Platform for Android M (6.0+) and     *
  * above.                                                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Application will fail to connect when sending an encrypted   *
  * request using FIPS/OpenSSL. The following error will occur:  *
  * problem with the SSL CA cert (path? access rights?).         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• Depending on the android version all binary files (eg.
  ca-bundle.crt) will be retrieve from the no_backup (Android M +)
  or files (below Android M) directory. This will ensure that FIPS
  will work for older and newer versions of Android.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MFPF/WORKLIGHT

• Fixed component ID

  5725I4301

Applicable component levels

• R610 PSY

     UP

• R620 PSY

     UP

• R630 PSY

     UP

• R700 PSY

     UP

• R710 PSY

     UP