PH48532: After upgrading to UCD Server 7.2.3.0, a server with FIPS mode configured will not start.

APAR status

• Closed as program error.

Error description

• After upgrading to UCD Server 7.2.3.0, a server with FIPS mode
  configured will not start.  The following error is presented:
  
  
  2022-08-01 10:40:34,239 IST ERROR main
  com.urbancode.container.tomcat.Container - Failed to start
  UrbanCode Deploy
  java.lang.RuntimeException: Failed to start UrbanCode Deploy
      at
  com.urbancode.ds.UDeployServer.start(UDeployServer.java:593)
      at
  com.urbancode.container.tomcat.Container.run(Container.java:154)
      at
  com.urbancode.ds.UDeployServer.main(UDeployServer.java:307)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
  Method)
      at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:90)
      at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:55)
      at java.lang.reflect.Method.invoke(Method.java:508)
      at
  com.urbancode.launcher.Launcher.invokeMainMethod(Launcher.java:2
  26)
      at com.urbancode.launcher.Launcher.launch(Launcher.java:162)
      at com.urbancode.launcher.Launcher.main(Launcher.java:96)
  Caused by: java.lang.ExceptionInInitializerError
      at
  java.lang.J9VMInternals.ensureError(J9VMInternals.java:145)
      at
  java.lang.J9VMInternals.recordInitializationFailure(J9VMInternal
  s.java:134)
      at java.lang.Class.forNameImpl(Native Method)
      at java.lang.Class.forName(Class.java:339)
      at
  java.security.Provider$Service.getImplClass(Provider.java:1645)
      at
  java.security.Provider$Service.newInstance(Provider.java:1603)
      at
  sun.security.jca.GetInstance.getInstance(GetInstance.java:248)
      at
  sun.security.jca.GetInstance.getInstance(GetInstance.java:176)
      at javax.net.ssl.SSLContext.getInstance(SSLContext.java:29)
      at
  com.urbancode.commons.util.ssl.SSLContextProtocolDetector.getSup
  portedSslContextProtocols(SSLContextProtocolDetector.java:248)
      at
  com.urbancode.container.tomcat.Container.initSSLSettings(Contain
  er.java:342)
      at
  com.urbancode.ds.UDeployServer.initSSLSettings(UDeployServer.jav
  a:743)
      at
  com.urbancode.ds.UDeployServer.start(UDeployServer.java:528)
      ... 9 more
  Caused by: java.lang.IllegalArgumentException: Only
  TLS1.0/TLS1.1/TLS1.2 protocol can be enabled when SP800_131
  transition mode or IBMJSSE2 enabled to run in FIPS mode
      at com.ibm.jsse2.m.a(m.java:23)
      at com.ibm.jsse2.bf$l.<clinit>(bf$l.java:4)
      ... 20 more
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * DevOps Deploy Web UI Users                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * After upgrading to UCD Server 7.2.3.0, a server with FIPS    *
  * mode                                                         *
  * configured will not start.                                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Fix is provided in IBM DevOps Deploy 7.2.3.8                 *
  ****************************************************************
  

Problem conclusion

• Fix is provided in IBM DevOps Deploy 7.2.3.8
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  UC DEPLOY

• Fixed component ID

  5725M5400

Applicable component levels