PI62868: ATTEMPTS TO START A WAS SERVER PROFILE FROM RAD V9.5.x RESULTS IN SSLHANDSHAKEEXCEPTION WHEN 'TLSV1.2' PROTOCOL IS ENABLED

Rational Application Developer for WebSphere Software 9.6
Rational Agent Controller Service Release 9.6
Rational Application Developer for WebSphere Software Fix Pack 3 (9.5.0.3) for 9.5.0

APAR status

• Closed as program error.

Error description

• You may encounter an error when attempting to start a WAS server
  from within RAD v9.5.0.1 after you have enabled 'TLSv1.2'
  protocol within the WAS server profile's Administrative Console
  (Security > SSL certificate and key management > SSL
  configurations > NodeDefaultSSLSettings > Quality of protection
  (QoP) settings).  When the server profile is configured to
  accept TLSv1.2 communications protocol only, the following
  exception may occur upon subsequent restart of the WAS server
  profile:
  
  
  [1/13/16 14:47:17:943 EST] 00000086 SSLHandshakeE E   SSLC0008E:
  Unable
  to initialize SSL connection.  Unauthorized access was denied or
  security settings have expired.  Exception is javax.net.ssl.
  SSLHandshakeException: Client requested protocol TLSv1 not
  enabled or
  not supported
  ...
  Caused by: javax.net.ssl.SSLHandshakeException: Client requested
  protocol TLSv1 not enabled or not supported
      at com.ibm.jsse2.p.a(p.java:36)
      at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:72)
      at com.ibm.jsse2.lb.a(lb.java:44)
      at com.ibm.jsse2.lb.a(lb.java:460)
      at com.ibm.jsse2.nb.a(nb.java:455)
      at com.ibm.jsse2.nb.a(nb.java:618)
      at com.ibm.jsse2.lb.t(lb.java:241)
      at com.ibm.jsse2.lb$1.run(lb$1.java:1)
      at
  java.security.AccessController.doPrivileged(AccessController.
  java:452)
      at com.ibm.jsse2.lb$c_.run(lb$c_.java:8)
      at
  com.ibm.ws.ssl.channel.impl.SSLUtils.handleHandshake(SSLUtils.
  java:834)
  

Local fix

• Please contact RAD Support to obtain a test fix for this issue.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of Websphere Application Server tools              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Attempts to start a Websphere Application Server profile     *
  * from RAD 9.5.x results in SSLHandshakeException when TLS 1.2 *
  * protocol is enabled                                          *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is included in Rational Application
  Developer version 9.5.0.3
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL APP DEV WI

• Fixed component ID

  5724J1901

Applicable component levels

• R950 PSY

     UP