IZ61665: RENEGOTIATION ISSUE WITH PROTOSSLENGINE

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: Stack Dump = java.lang.NullPointerException
   at com.ibm.jsse2.qb.a(qb.java:633)
   at com.ibm.jsse2.qb.unwrap(qb.java:827)
   at
  com.ibm.ws.ssl.channel.impl.SSLReadServiceContext.decryptMessage
  (SSLReadServiceContext.java:1293)
   at
  com.ibm.ws.ssl.channel.impl.SSLReadServiceContext.read(SSLReadSe
  rviceContext.java:463)
   at
  com.ibm.ws.ssl.channel.impl.SSLReadServiceContext.read(SSLReadSe
  rviceContext.java:331)
   at
  com.ibm.ws.ssl.channel.impl.SSLConnectionLink.readyInboundPostHa
  ndshake(SSLConnectionLink.java:723)
   at
  com.ibm.ws.ssl.channel.impl.SSLConnectionLink$MyHandshakeComplet
  edCallback.complete(SSLConnectionLink.java:412)
   at
  com.ibm.ws.ssl.channel.impl.SSLUtils.handleHandshake(SSLUtils.ja
  va:841)
   at
  com.ibm.ws.ssl.channel.impl.SSLHandshakeIOCallback.complete(SSLH
  andshakeIOCallback.java:70)
   at
  com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureComp
  leted(AioReadCompletionListener.java:165)
   at
  com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyn
  cFuture.java:217)
   at
  com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncC
  hannelFuture.java:161)
   at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:136)
   at
  com.ibm.io.async.ResultHandler.complete(ResultHandler.java:195)
   at
  com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHand
  ler.java:743)
   at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:873)
   at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1473)
  .
  

Local fix

Problem summary

• NullPointerException is thrown by JSSE-NIO based SSL server,  if
  SSL client requests for SSL rehandshake soon after the first
  successful handshake without any App data exchange.
  

Problem conclusion

• This defect will be fixed in:
  5.0.0 SR11
  1.4.2 SR13-2
  .
  Problem to be fixed in 1.4.2 and 5.0 ibmjsseprovider2.jar -
  Build 9/22/09
  Tivoli APAR IZ59741
  .
  To obtain the fix:
  Install build 20090931 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PK97128

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSN

     UP