IBM Support

PI48460: FAILURE TO CONVERT CERTIFICATES WHEN CMS KEYSTORE IS PRESENT

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Sometimes there is an error when trying to replace a personal
    certificate in a CMS keystore.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server trying to convert SSL certificate    *
    *                  with the plugin CMS keystore in the         *
    *                  configuration.                              *
    ****************************************************************
    * PROBLEM DESCRIPTION: There is an error while converting      *
    *                      certificates                            *
    *                      due to CMS signer certificate not       *
    *                      getting cleaned up in the process.      *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    There is an error from CMS keystore due to a certificate
    supporting chain not getting cleaned up properly while
    replacing the old certificate for a new one.
    

Problem conclusion

  • Update the code to make sure the CMS keystore supporting chain
    of certificate is properly cleaned out before replacing the
    certificate personal certificate with a new one.
    
    The fix for this APAR is currently targeted for inclusion in
    fix pack 7.0.0.41, 8.0.0.12, and 8.5.5.8.  Please refer to the
    Recommended Updates
    page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI48460

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-09-10

  • Closed date

    2015-10-20

  • Last modified date

    2015-10-20

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R700 PSY

       UP

  • R800 PSY

       UP

  • R850 PSY

       UP



Document information

More support for: WebSphere Application Server
General

Software version: 7.0

Reference #: PI48460

Modified date: 20 October 2015