IBM Support

RQMCopyUtility error: SSL_TLS SSLContext not available. Certificate does not conform to algorithm constraints

Troubleshooting


Problem

IBM Rational Quality Manager (RQM) copy utility raises SSL_TLS SSLContext and certificates exceptions whether source and target projects are on the same server or different servers. A workaround is available to resolve this issue.

Symptom

Here is an example from the command line:


Command used: java -jar RQMCopyUtility.jar -s=https://rqmServer1:9443/jaz z/secure/service/com.ibm.rqm.integration.service.
IIntegrationService/resources/<Source_project> -us=**** -pws=**** -
d=https://rqmServer2:9443/jazz/secure/service/com.ibm.rqm.integration.service. IIntgrationService/resources/<Target_project> -a=template -l=copyUtilitylog.txt

Here is the subsequent error:

Error:
java.security.NoSuchAlgorithmException: SSL_TLS SSLContext not available
Unable to create SSL_TLS context, trying SSLv3
com.ibm.rqm.ct.util.Logger logError
SEVERE: Error logging in to source: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints

Cause

JDK7 has changed the default Java security settings to disable MD2 algorithm to sign SSL certificates.

Resolving The Problem

The default Java security settings can be re-enabled by editing JDK_HOME/jre/lib/security/java.security and commenting out the following line:


jdk.certpath.disabledAlgorithms=MD2


to


#jdk.certpath.disabledAlgorithms=MD2

Windows path to the config file: <Java install path>\Java\jre7\lib\security

You can also revert to an older version of the Java version to resolve this issue.

[{"Product":{"code":"SSR27Q","label":"Rational Quality Manager"},"Business Unit":{"code":"BU005","label":"IoT"},"Component":"RQM Server","Platform":[{"code":"PF033","label":"Windows"}],"Version":"3.0.1.3;3.0.1.4;3.0.1.5;4.0;4.0.1","Edition":""}]

Product Synonym

RQM

Document Information

Modified date:
16 June 2018

UID

swg21625634