IC88513: ARRAYINDEXOUTOFBOUNDSEXCEPTION WHEN SSL CLIENTAUTH ENABLED

WebSphere Message Broker V8.0 - Fix Pack 8.0.0.2

APAR status

• Closed as program error.

Error description

• When a client authentication is enabled at the server side,
  the following exception is reported by WMB in the stderr file of
  EG
  +++++++++
  Caused by: java.lang. ArrayIndexOutOfBoundsException: Array
  index out of
  range: 0
  at
  com.ibm.broker.imbsslsocket.MbSslSocket$KeyChoiceX509KeyManager.
  chooseClientAlias
  ++++++++
  
  This happens when the server is enabled with client
  authentication and the server sends a client certificate request
  with empty list of cert authorities. ie. in JSSE trace taken
  at the WMB(client) side, you should see the following:
  
  *** CertificateRequest
  Cert Types: RSA
  Cert Authorities:
  <Empty>
  

Local fix

• No local fix available.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All Users of WebSphere Message Broker V7.0 or higher using SSL
  with the SOAP or HTTP request nodes.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM SUMMARY:
  When client authentication is enabled at the SSL server side, an
  array ArrayIndexOutOfBoundsException is reported by the
  execution group which contains the SOAP or HTTP request node.
  

Problem conclusion

• WebSphere Message Broker has been modified to prevent the
  ArrayIndexOutOfBoundsException occurring when SSL client
  authentication is required by the remote server.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Platform           v7.0
  --------           --------------------
  Multiplatforms     7.0.0.6
  
  Platform           v8.0
  --------           --------------------
  Multiplatforms     8.0.0.2
  
  The latest available maintenance can be obtained from
  'WebSphere Message Broker Recommended Fixes'
  http://www.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available, information on
  its planned availability can be found in 'WebSphere Message
  Broker Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEB MESSAGE BRO

• Fixed component ID

  5724J0510

Applicable component levels

• R700 PSY

     UP