IBM Support

IT19551: HTTP SERVER ADAPTER DOES NOT SEND COMPLETE CERTIFICATE CHAIN TO THE TRADING PARTNER DURING SSL CLIENT AUTHENTICATION

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

Direct links to fixes

iSeries_Media_5020602_4
Media_IM_5020602_4
iSeries_Media_5020602_4
Media_IM_5020602_4

 

APAR status

  • Closed as program error.

Error description

  • IBM Sterling B2B Integrator is not presenting the whole
certificate chain in versions
5.2.6.2 and 5.2.6.3 when doing SSL client authentication. This
can be confirmed by the Certificate capture utility.

In versions 5.2.4 and 5.2.6.1 IBM Sterling B2B Integrator
presents the
whole certificate chain. This was confirmed by capturing network
traces.

Local fix

  • Customers can export the whole chain of certificates of the
corresponding System Certificate using the Resource Manager
Import/Export option from ISBI version 5.2.6.1 and import the
Resource as a XML file onto SI 5.2.6.2 and/or 5.2.6.3

Problem summary

  • Users Affected:
All

Problem Description:
HTTP Client Adapter does not send public part of System
Certificate when doing Client Authentication with HTTPS Server.

Platforms Affected:
All

Problem conclusion

  • Resolution Summary:
A code fix is provided.

Delivered In:
5020602_4

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IT19551
    • 

  • Reported component name
    STR B2B INTEGRA
    • 

  • Reported component ID
    5725D0600
    • 

  • Reported release
    526
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2017-03-06
    • 

  • Closed date
    2017-05-11
    • 

  • Last modified date
    2017-08-10
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    STR B2B INTEGRA
    • 

  • Fixed component ID
    5725D0600
    • 



Applicable component levels


    

  • R526  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS3JSW","label":"IBM Sterling B2B Integrator"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.2.6","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            10 August 2017
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback