PK23787: FAIL TO DECRYPT A SOAP MESSAGE WITH PRIVATE KEY.

6.1.0.1: WebSphere Application Server V6.1.0 Fix Pack 1 for HP-UX
6.1.0.1: WebSphere Application Server V6.1.0 Fix Pack 1 for AIX
6.1.0.1: WebSphere Application Server V6.1.0 Fix Pack 1 for Windows
6.1.0.1: WebSphere Application Server V6.1.0 Fix Pack 1 for Linux
6.1.0.1: WebSphere Application Server V6.1.0 Fix Pack 1 for i5/OS
6.1.0.1: WebSphere Application Server V6.1.0 Fix Pack 1 for Solaris

APAR status

• Closed as program error.

Error description

• Server fails to decrypt a soap message with Private key.
  Following exception occrrs when decrypting the message;
  "WSEC5164E: An exception while decrypting the message:
  java.security.InvalidKeyException: Public Key cannot be used
  to decrypt." The root cause of this problem isDN is not added
  to private container.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: WebSphere Application Server version 6.0.2   *
  *                 users of webservices security.               *
  ****************************************************************
  * PROBLEM DESCRIPTION: Error occurrs while decrypting SOAP     *
  *                      message even though key is good.        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The following exception occurrs when decrypting a SOAP message:
  
  WSEC5164E: An exception while decrypting the message:
  java.security.InvalidKeyException: Public Key cannot be used
  to decrypt.
  

Problem conclusion

• The code was changed so that the distinguished name, in
  addition to the definied alias are added to our list of
  certificates.
  
  The fix for this APAR is currently targeted for inclusion
  in fixpack 6.0.2.13.
  Please refer to the recommended updates page for delivery
  information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• WSSEC
  

Fix information

• Fixed component name

  WEBSPH APP SERV

• Fixed component ID

  5724J0800

Applicable component levels

• R60A PSY

     UP

• R60H PSY

     UP

• R60I PSY

     UP

• R60S PSY

     UP

• R60W PSY

     UP