IBM Support

IC84691: (SSPCM) UNABLE TO IMPORT CERTIFICATES - COUNTRY CODE ENCODING PROBLEM.

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Error DescriptionÏ
    The user is attempting to import a keycert that contains a
    digital signed cert from GoDaddy (vendor).  The problem with
    the certificate is that the Country Code is encoded as a UTF8
    string instead of a Printable string.  This is incorrect on the
    vendor behalf.
    

Local fix

  • Local FixÏ
    The solution is to allow a illegal encoding for the Country
    Code string using the following value in the startup CM script:
    -DallowIllegalCountryNameEncodings=1
    

Problem summary

  • Sterling Secure Proxy Customers applying SSP3.4.1.0 Patch 2 for
    GUI maintenance.
    
    Problem Description:
    SSPCM patch 2 delivers GA version of war files.
    Customer put on SSP 3.4.1.0 patch 2 to get post-GA maintenance
    for SSPCM. However, when the SSPCM installation completed, the
    files in the SSP3410cm/apps/jetty/webservices/webapps directory
    were all from the GA release (dated 1/18/2012).  The
    InstallAnywhere image for SSP3410Maint was still being built
    with the GA versions of SSPDashboard.war and SspJsf.war.
    
    Platforms Affected:
    All
    

Problem conclusion

  • Resolution Summary:
    Updated the SSP CM Installer to pull the
    ./apps/jetty/webservices/ SSPDashboard.war and SspJsf .war files
    from the SSP3410Maint staging area instead of the SSP3410 (GA)
    staging area.
    
    Delivered In:
    3.4.1.3
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC84691

  • Reported component name

    STR SECURE PROX

  • Reported component ID

    5725D0300

  • Reported release

    341

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2012-06-18

  • Closed date

    2012-08-03

  • Last modified date

    2012-08-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    STR SECURE PROX

  • Fixed component ID

    5725D0300

Applicable component levels

  • R341 PSY

       UP



Document information

More support for: Sterling Secure Proxy

Software version: 341

Reference #: IC84691

Modified date: 2012-08-03