IC88513: ARRAYINDEXOUTOFBOUNDSEXCEPTION WHEN SSL CLIENTAUTH ENABLED

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When a client authentication is enabled at the server side,
    the following exception is reported by WMB in the stderr file of
    EG
    +++++++++
    Caused by: java.lang. ArrayIndexOutOfBoundsException: Array
    index out of
    range: 0
    at
    com.ibm.broker.imbsslsocket.MbSslSocket$KeyChoiceX509KeyManager.
    chooseClientAlias
    ++++++++
    
    This happens when the server is enabled with client
    authentication and the server sends a client certificate request
    with empty list of cert authorities. ie. in JSSE trace taken
    at the WMB(client) side, you should see the following:
    
    *** CertificateRequest
    Cert Types: RSA
    Cert Authorities:
    <Empty>
    

Local fix

  • No local fix available.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    All Users of WebSphere Message Broker V7.0 or higher using SSL
    with the SOAP or HTTP request nodes.
    
    
    Platforms affected:
    z/OS, MultiPlatform
    
    ****************************************************************
    PROBLEM SUMMARY:
    When client authentication is enabled at the SSL server side, an
    array ArrayIndexOutOfBoundsException is reported by the
    execution group which contains the SOAP or HTTP request node.
    

Problem conclusion

  • WebSphere Message Broker has been modified to prevent the
    ArrayIndexOutOfBoundsException occurring when SSL client
    authentication is required by the remote server.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Platform           v7.0
    --------           --------------------
    Multiplatforms     7.0.0.6
    
    Platform           v8.0
    --------           --------------------
    Multiplatforms     8.0.0.2
    
    The latest available maintenance can be obtained from
    'WebSphere Message Broker Recommended Fixes'
    http://www.ibm.com/support/docview.wss?rs=849&uid=swg27006041
    
    If the maintenance level is not yet available, information on
    its planned availability can be found in 'WebSphere Message
    Broker Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC88513

  • Reported component name

    WEB MESSAGE BRO

  • Reported component ID

    5724J0510

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-11-26

  • Closed date

    2012-11-30

  • Last modified date

    2012-11-30

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEB MESSAGE BRO

  • Fixed component ID

    5724J0510

Applicable component levels

  • R700 PSY

       UP



Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

WebSphere Message Broker

Software version:

7.0

Reference #:

IC88513

Modified date:

2012-11-30

Translate my page

Machine Translation

Content navigation