IT11806: BIPBROKER ABEND ON STARTUP WITH WEBADMIN SSL ENABLED

APAR status

• Closed as program error.

Error description

• You can secure connections to the web user interface of an
  integration node so that the web user interface is accessible
  only over HTTPS. If this configuration is done whilst the
  broker is shutdown, in particular if the HTTPSConnector
  'keystorePass' property is set using the mqsichangeproperties
  command whilst the broker is shutdown, the AdminAgent
  (bipbroker) process on startup may throw a conversion exception
  and terminate.
  
  If an abend file is generated, the call stack will look similar
  to the following:
  
  abort
  myabort__3stdFv
  terminate__3stdFv
  terminate__Fv
  <no name available>
  throwThis__23ImbRecoverableExceptionFv
  internalFromUnicode__15ImbConverterCPPFPcT1PCUsT3
  fromUnicode__15ImbConverterCPPFRC10ImbWstringbc
  convertFileNameToNarrow__12ImbConverterFRC10ImbWstring
  getRegistryStringValue__21ImbInitialisationDataCFRC10ImbWstring
  getRegistryValue__21ImbInitialisationDataCFRC10ImbWstring
  getBrokerValue__21ImbInitialisationDataCFRC10ImbWstring
  getBrokerDSNKeyValue__21ImbInitialisationDataCFRC10ImbWstringT1
  getDSNPassword__25ImbInitialisationDataBaseCFRC10ImbWstring
  Java_com_ibm_broker_httplistener_InitialisationData_refreshHTTPL
  istenerConnectorProperties2
  

Local fix

• Set the webadmin HTTPSConnector keystorePass property using the
  mqsichangeproperties command when the broker is running.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM Integration Bus V10.0 using SSL to connect to
  the web user interface server.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  You can secure connections to the web user interface of an
  integration node so that the web user interface is accessible
  only over HTTPS. If the HTTPSConnector 'keystorePass' property
  of the webadmin component is set using the mqsichangeproperties
  command whilst the integration node is not running, the
  AdminAgent (bipbroker) process on startup may throw a conversion
  exception and terminate.
  
  The problem is that the keystorePass value is being saved in the
  registry in an unencrypted format. The AdminAgent on startup,
  when reading the properties from the registry, is expecting the
  keystorePass to be encrypted and therefore decrypts it. This is
  causing it to return characters that may not be convertable by
  the unicode converter, and an exception is thrown which triggers
  the abend.
  

Problem conclusion

• The mqsichangeproperties command now correctly encrypts the
  keystorePass property of the webadmin's HTTPSConnector object
  before saving the value to the registry.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.7
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  INTEGRATION BUS

• Fixed component ID

  5724J0540

Applicable component levels

• RA00 PSY

     UP