PK93140: WHEN USING WMQ SERVER FUNCTIONALITY, WITH SSL AND JAVA 2 SECURITY ENABLED, AN ACCESSCONTROLEXCEPTION MIGHT BE THROWN.

Fixes are available

APAR status

Closed as program error.

Error description

When using WMQ server functionality, with SSL and Java 2
security enabled, an AccessControlException FFDC is generated.
Messaging with the WMQ server will not function correctly.
The following stack shows the source of the Exception:

FFDC Exception:java.security.AccessControlException
SourceId:com.ibm.ws.sib.remote.mq.impl.channel.RMQTransportChain
MetaData.getSSLSocketFactoryForChain ProbeId:1:282:1.26
java.security.AccessControlException: Access denied
(com.ibm.websphere.security.WebSphereRuntimePermission
getSSLConfig) at
java.security.AccessController.checkPermission(AccessController.
java:108) at
java.lang.SecurityManager.checkPermission(SecurityManager.java:5
32) at
com.ibm.ws.security.core.SecurityManager.checkPermission(Securit
yManager.java:211) at
com.ibm.websphere.ssl.JSSEHelper.getProperties(JSSEHelper.java:9
58) at
com.ibm.ws.sib.remote.mq.impl.channel.RMQTransportChainMetaData.
getSSLSocketFactoryForChain(RMQTransportChainMetaData.java:258)
at
com.ibm.ws.sib.remote.mq.impl.AbstractRMQSession.configureSSL(Ab
stractRMQSession.java:1169) at
com.ibm.ws.sib.remote.mq.impl.AbstractRMQSession.connectToQueueM
anager(AbstractRMQSession.java:354) at
com.ibm.ws.sib.remote.mq.impl.AbstractRMQSession.<init>(Abstract
RMQSession.java:253)

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  Users of the default messaging provider for *
*                  IBM WebSphere Application Server            *
****************************************************************
* PROBLEM DESCRIPTION: An FFDC is indicating that an           *
*                      AccessControlException is thrown        *
*                      when the RMQTransportChainMetaData      *
*                      calls the JSSEHelper class.             *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
Insufficient privilege is used to obtain SSL configuration
data from the WebSphere runtime.  The Java 2 Security
"getSSLConfig" WebSphereRuntimePermission is required for MQ
server to use SSL configuration to connect to WMQ.

Problem conclusion

The fix for this APAR is currently targeted for inclusion in
fix pack 7.0.0.7.  Please refer to the Recommended Updates
page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PK93140
Reported component name
PLAT MSG COM
Reported component ID
620800101
Reported release
300
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-08-05
Closed date
2009-09-17
Last modified date
2009-09-17

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
PLAT MSG COM
Fixed component ID
620800101

Applicable component levels

R300 PSY
UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
24 October 2021

Tips

PK93140: WHEN USING WMQ SERVER FUNCTIONALITY, WITH SSL AND JAVA 2 SECURITY ENABLED, AN ACCESSCONTROLEXCEPTION MIGHT BE THROWN.

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R300 PSY

Document Information

Share your feedback

Need support?