JR49147: NOT ABLE TO ACCESS PROCESS INSPECTOR FOR PROCESS SERVER VIA PROCESS DESIGNER

Version 8.5 Refresh Pack 5 for the IBM Business Process Manager products
Version 8.5.0 Fix Pack 2 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• In Process Inspector, click on the Process Server dropdown and
  choose the server to be connected to, user receives error,
  java.lang.Exception: Cannot connect to server using URL:null
  

Local fix

• Import the Process Server (PS) certificate into PD trust store.
  
  Here are the general steps,
  
  1. Copy trust.p12 from PD to PS server. This should be located
  under <PD_install_dir>\etc.
  2. Add the PS certificate. Suggest using IKEYMAN,
  
  http://www-01.ibm.com/software/webservers/httpservers/doc/v10/ib
  m/9atikeyu.htm
  
  The default password for trust.p12 trust store used by Process
  Designer is "WebAS" They will need to input it in IKEYMAN
  when opening trust.p12.
  3. Copy trust.p12 back to (all) PD clients.
  
  As a reference, following document shows how to import IHS
  certificate into PD trust store. Importing PS certificate
  should be similar.
  
  
  http://pic.dhe.ibm.com/infocenter/dmndhelp/v8r5m0/topic/com.ibm.
  wbpm.admin.doc/topics/tins_cnfg_ssl_pd_to_pc.html
  

Problem summary

• PD (Process Designer) Process Inspector cannot access a PS
  (Process Server) using SSL (Secure Socket Layer) if the
  certificate is not imported.
  
  AFFECTED EDITIONS:
  IBM Business Process Manager (BPM) V8.5.0 Advanced, Standard and
  Express.
  
  PROBLEM DETAILED DESCRIPTION:
  PD Process Inspector cannot access a PS using SSL if the
  certificate is not imported.  This is because the PD Process
  Inspector does not call the PS rest API with the right host
  configuration, resulting PD not displaying the dialog to import
  the SSL certificate, when attempting to connect to a PS. A
  similar stack trace to the following will be observed in the
  client side PD ae.log,
  
  <log>
  java.lang.Exception: Cannot connect to server using URL:null
   at
  com.lombardisoftware.client.ae.server.ServerNodeImpl$1.doWork(Se
  rverNodeImpl.java:184)
   at
  com.lombardisoftware.client.ae.server.ServerNodeImpl$BackgroundT
  ask.run(ServerNodeImpl.java:697)
   at
  org.eclipse.jface.operation.ModalContext$ModalContextThread.run(
  ModalContext.java:121)
  Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not
  authenticated
   at
  com.ibm.jsse2.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.
  java:126)
   at
  org.apache.commons.httpclient.protocol.AbstractVerifier.verify(U
  nknown Source)
   at
  org.apache.commons.httpclient.protocol.SSLProtocolSocketFactory.
  createSocket(Unknown Source)
   at
  org.apache.commons.httpclient.protocol.SSLProtocolSocketFactory.
  createSocket(Unknown Source)
   at
  org.apache.commons.httpclient.HttpConnection.open(HttpConnection
  .java:707)
   at
  org.apache.commons.httpclient.HttpMethodDirector.executeWithRetr
  y(HttpMethodDirector.java:387)
   at
  org.apache.commons.httpclient.HttpMethodDirector.executeMethod(H
  ttpMethodDirector.java:171)
   at
  org.apache.commons.httpclient.HttpClient.executeMethod(HttpClien
  t.java:397)
   at
  org.apache.commons.httpclient.HttpClient.executeMethod(HttpClien
  t.java:323)
   at
  com.lombardisoftware.client.ae.server.ServerNodeImpl$1.doWork(Se
  rverNodeImpl.java:179)
   ... 2 more
  </log>
  

Problem conclusion

• Fix for JR49147 has been superseded by JR50140 because of bad
  construction of the original fix. See details in JR50140 which
  provides information about the situation and exception that may
  be experienced if JR49147 has been applied. The fix for IBM
  BPM 8.5.0.1 is available on Fix Central (http://www.ibm.com/supp
  ort/fixcentral), search for JR50140:
  
      1. Select the product group, product, installed version, and
  platform, and click Continue.
      2. Select APAR or SPR, enter JR50140, and click Continue.
  
  When downloading fix packages, ensure that you also download the
  readme file for each fix. Review each readme file for additional
  installation instructions and information about the fix.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  JR50140

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R850 PSY

     UP