IBM Support

PI50825: Access is denied with a WebSphereRuntimePermission for getSSLCon fig in CSIv2 during a naming lookup.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • For a Liberty profile server, a
    java.security.AccessControlException is issued in FFDC as
    follows for a naming lookup,
    
    Exception = java.security.AccessControlException
    Source =
    com.ibm.ws.transport.iiop.internal.NamingServiceAdapterActiv
    ator
    probeid = 63
    Stack Dump = java.security.AccessControlException: Access
    denied
    ("com.ibm.websphere.security.WebSphereRuntimePermission"
    "getSSLConfig")
    at
    java.security.AccessController.throwACE(AccessController.jav
    a:121)
    at
    java.security.AccessController.checkPermission(AccessControl
    ler.java:194)
    at
    java.lang.SecurityManager.checkPermission(SecurityManager.ja
    va:563)
    at
    com.ibm.websphere.ssl.JSSEHelper.getProperties(JSSEHelper.ja
    va:402)
    at
    com.ibm.ws.security.csiv2.config.ssl.SSLConfig.getAssociatio
    nOptions(SSLConfig.java:109)
    at
    com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelp
    er.extractSSLTransport(ServerConfigHelper.java:211)
    ...
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server Liberty Profile - Security           *
    ****************************************************************
    * PROBLEM DESCRIPTION: Access is denied with a                 *
    *                      WebSphereRuntimePermission for          *
    *                      getSSLConfig in CSIv2 during a naming   *
    *                      lookup.                                 *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    For a Liberty profile server, a
    java.security.AccessControlException is issued in FFDC as
    follows for a naming lookup,
    
    Exception = java.security.AccessControlException
    Source =
    com.ibm.ws.transport.iiop.internal.NamingServiceAdapterActivator
    probeid = 63
    Stack Dump = java.security.AccessControlException: Access denied
    ("com.ibm.websphere.security.WebSphereRuntimePermission"
    "getSSLConfig")
    	at
    java.security.AccessController.throwACE(AccessController.java:12
    1)
    	at
    java.security.AccessController.checkPermission(AccessController.
    java:194)
    	at
    java.lang.SecurityManager.checkPermission(SecurityManager.java:5
    63)
    	at
    com.ibm.websphere.ssl.JSSEHelper.getProperties(JSSEHelper.java:4
    02)
    	at
    com.ibm.ws.security.csiv2.config.ssl.SSLConfig.getAssociationOpt
    ions(SSLConfig.java:109)
    	at
    com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.e
    xtractSSLTransport(ServerConfigHelper.java:211)
    ...
    

Problem conclusion

  • The CSIv2 code was modified to prevent a
    java.security.AccessControlException from happening during a
    naming lookup.
    
    The fix for this APAR is currently targeted for inclusion in fix
    pack 8.5.5.8.  Please refer to the Recommended Updates page for
    delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI50825

  • Reported component name

    WAS LIBERTY COR

  • Reported component ID

    5725L2900

  • Reported release

    855

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-10-20

  • Closed date

    2015-10-29

  • Last modified date

    2015-10-29

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WAS LIBERTY COR

  • Fixed component ID

    5725L2900

Applicable component levels

  • R855 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSD28V","label":"WebSphere Application Server Liberty Core"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"855","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
24 November 2021