IBM Support

PK26053: WEB SERVICE ATOMIC TRANSACTIONS ( WSAT ) MAY FAIL WHEN USING X509 CERTIFICATES ON A SECURE SERVER

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • WSAT transactions may fail on a secure server when the X509
    certificate has the fully qualified domain name in its subject,
    and client certificate authentication is enabled.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All WebSphere Application Server version 6   *
    *                 users of Web Services Atomic Transactions.   *
    ****************************************************************
    * PROBLEM DESCRIPTION: An SSL connection from WebSphere        *
    *                      Application Server is rejected by the   *
    *                      client.                                 *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The WebSphere WAT Service is inserting the IP address into end
    point references. This typically does not match the common
    name configured in an X509 certificate, leading to SSL
    connection failure.
    

Problem conclusion

  • The WebSphere WS-AT service will be changed to use the
    configured host name instead of the IP address.
    The version 6.0 fix for this APAR is currently targeted for
    inclusion in fixpack 6.0.2.13.
    The version 6.1 fix for this APAR is currently targeted for
    inclusion in fixpack 6.1.0.1.
    Please refer to the recommended updates page for delivery
    information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PK26053

  • Reported component name

    WEBSPH APP SERV

  • Reported component ID

    5724J0800

  • Reported release

    60A

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2006-06-06

  • Closed date

    2006-07-05

  • Last modified date

    2006-07-05

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • TRANS
    

Fix information

  • Fixed component name

    WEBSPH APP SERV

  • Fixed component ID

    5724J0800

Applicable component levels

  • R60A PSY

       UP

  • R60H PSY

       UP

  • R60I PSY

       UP

  • R60P PSY

       UP

  • R60S PSY

       UP

  • R60W PSY

       UP

  • R60Z PSY

       UP

  • R61A PSY

       UP

  • R61H PSY

       UP

  • R61I PSY

       UP

  • R61P PSY

       UP

  • R61S PSY

       UP

  • R61W PSY

       UP

  • R61Z PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
19 October 2021