SE59661: IBM RATIONAL DEVELOPER FOR I 9.0.1 FAILS TO CONNECT USING SSL IF NON-SECURE PORT 8476 IS BLOCKED

Rational Developer for i 9.1.1

APAR status

• Closed as program error.

Error description

• When using an SSL connection to the IBM i with IBM Rational
  Developer for i 9.0.1, if the non-secure port 8476 is blocked,
  the connection will timeout.
  
  The error shown in the .log is:
  !ENTRY org.eclipse.rse.ui 4 0 2014-07-15 18:00:03.362
  !MESSAGE IOException occurred during signon
  !STACK 0
  java.net.ConnectException: Connection timed out: connect
   at java.net.DualStackPlainSocketImpl.connect0(Native Method)
   at
  java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSo
  cketImpl.java:79)
   at
  java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketIm
  pl.java:358)
   at
  java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainS
  ocketImpl.java:219)
   at
  java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl
  .java:201)
   at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:180)
   at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
   at java.net.Socket.connect(Socket.java:616)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:76)
   at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:43)
   at java.lang.reflect.Method.invoke(Method.java:607)
   at
  com.ibm.as400.access.PortMapper.getSocketConnection(PortMapper.j
  ava:273)
   at
  com.ibm.as400.access.PortMapper.getServerSocket(PortMapper.java:
  193)
   at
  com.ibm.as400.access.AS400ImplRemote.signonConnect(AS400ImplRemo
  te.java:2334)
   at
  com.ibm.as400.access.AS400ImplRemote.signon(AS400ImplRemote.java
  :2250)
   at
  com.ibm.as400.access.AS400.sendSignonRequest(AS400.java:3035)
   at com.ibm.as400.access.AS400.promptSignon(AS400.java:2599)
   at com.ibm.as400.access.AS400.signon(AS400.java:3910)
   at com.ibm.as400.access.AS400.connectService(AS400.java:1168)
   at
  com.ibm.etools.iseries.internal.connectorservice.ToolboxCredenti
  alsValidator.validate(ToolboxCredentialsValidator.java:70)
   ...
  

Local fix

• If possible open the connection to 8476 to allow the first
  connection to complete.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Developers using SSL to connect RDi to IBM i.                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When a SSL connection is created and used in RDi to an IBM   *
  * i, non-SSL ports are still used.                             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• This problem is fixed in the RDi 9.1.1 update.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• SSL
  

Fix information

• Fixed component name

  RATL DEV FOR I

• Fixed component ID

  5724Y99DI

Applicable component levels

• R901 PSY

     UP

• R910 PSY

     UP