PI68232: CERTIFICATE PINNING FAILS ON 7.1. IT ACCEPTS ALL DOMAINS IRRESPECTIVE OF THE CERTIFICATE BEING PINNED

APAR status

• Closed as program error.

Error description

• Certificate pinning goes through successfully on 7.1
  irrespective of the correct certificate being pinned
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users on 7. 1 using certificate pinning                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * All users on 7. 1 using certificate pinning, the             *
  * certificated will be accepted irrespective of the            *
  * certificate being available on the client                    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• All users on 7. 1 using certificate pinning, the certificated
  will be accepted irrespective of the certificate being available
  on the client. This is now fixed by ensuring that the
  TLSSocketFactory takes into consideration before passing the
  certificate.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MOBILE1ST PLATF

• Fixed component ID

  5725I4301

Applicable component levels

• R710 PSY

     UP