PH61457: WHEN CONFIGURING NIST SP800-131 IN STRICT MODE, JAVA.LANG.ILLEGALARGUMENTEXCEPTION OCCURS

APAR status

• Closed as program error.

Error description

• Clients are experiencing difficulties inserting, updating, or
  accessing data in the cache. This issue arises when WebSphere
  eXtreme Scale 8.6.1.6 servers are configured with NIST SP800-131
  in strict mode, and clients communicate with servers by using
  SSL, resulting in the following error log:
  
  
  java.lang.IllegalArgumentException: Only TLS1.2 protocol can be
  enabled in SP800_131 strict mode
  
  In scenarios where WebSphere eXtreme Scale (XSLD) container
  servers are configured with the -Dcom.ibm.jsse2.sp800-131=strict
  option, and restAdmin, restUI, and restData servers use SSL
  connections, the data cannot be accessed through REST APIs.
  

Local fix

• Set -Dcom.ibm.jsse2.sp800-131=transition instead of strict.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  WebSphere Extreme Scale                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: When configuring NIST sp800-131 in      *
  *                      strict mode,                            *
  *                      java.lang.illegalargumentexception      *
  *                      occurs                                  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Clients are experiencing difficulties inserting, updating, or
  accessing data in the cache. This issue arises when WebSphere
  eXtreme Scale 8.6.1.6 servers are configured with NIST SP800-
  131
  in strict mode, and clients communicate with servers by using
  SSL, resulting in the following error log:
  java.lang.IllegalArgumentException: Only TLS1.2 protocol can be
  enabled in SP800_131 strict mode
  In scenarios where WebSphere eXtreme Scale (XSLD) container
  servers are configured with the -Dcom.ibm.jsse2.sp800-
  131=strict
  option, and restAdmin, restUI, and restData servers use SSL
  connections, the data cannot be accessed through REST APIs.
  

Problem conclusion

• A code change was made to fix illegalargumentexception with
  NIST sp800-131 in strict mode. The fix will be
  available in 8.6.1.7 release. iFix is available upon request.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WS EXTREME SCAL

• Fixed component ID

  5724X6702

Applicable component levels