PM22724: AFTER RUNNING ADDNODE, NEW NODEAGENT ABENDS DURING STARTUP. CWPKI0007I: SSL SERVICE FAILED TO START SUCCESSFULLY

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Customer runs the addNode command to add a new node to a cell.
  
  The new node's nodeagent ABENDs during startup with the
  following messages in the job log:
  
  CWPKI0007I: SSL service failed to start successfully
  BBOO0035W TERMINATING THE CURRENT PROCESS, REASON=C9C21C4F.
  
  FFDC records contain
  Exception = java.lang.NullPointerException
  
  Source =
  com.ibm.ws.ssl.core.SSLConfigManager.initializeServerSSL
  probeid = 235
  Stack Dump = java.lang.NullPointerException
  at java.util.Hashtable.put(Hashtable.java:632)
  at java.util.Properties.setProperty(Properties.java:163)
  at com.ibm.ws.ssl.config.SSLConfigManager.loadGlobalProperties(
      SSLConfigManager.java:1115)
  at com.ibm.ws.ssl.config.SSLConfigManager.initializeServerSSL(
      SSLConfigManager.java:168)
  
  nodeAgent task SYSPRINT
  Trace: 2010/09/11 03:07:38.655 01 t=7E6D90 c=UNK key=S2
  (13007002)
    ThreadId: 0000000a
    FunctionName: com.ibm.ws.ssl.config.SSLConfigManager
    SourceId: com.ibm.ws.ssl.config.SSLConfigManager
    Category: FINEST
  ExtendedMessage: Setting global property:
  was.com.ibm.websphere.security.zos.csiv2.inbound.transport.sslco
  nfig=null
  
  (ffdc logs opened and then the failure)
  Trace: 2010/09/11 03:07:38.780 01 t=7E6D90 c=UNK key=S2
  (13007002)
    ThreadId: 0000000a
    FunctionName: com.ibm.ws.ssl.core.SSLComponentImpl
    SourceId: com.ibm.ws.ssl.core.SSLComponentImpl
    Category: AUDIT
  ExtendedMessage: BBOO0222I: CWPKI0007I: SSL service failed to
  start successfully
  com.ibm.ws.exception.ConfigurationError:
  com.ibm.websphere.ssl.SSLException:
  java.lang.NullPointerException
  .at com.ibm.ws.ssl.core.SSLComponentImpl.initialize(
      SSLComponentImpl.java:206)
  .at com.ibm.ws.runtime.component.ContainerImpl.
      initializeComponent(ContainerImpl.java:1338)
  .at com.ibm.ws.runtime.component.ContainerImpl.
      initializeComponents(ContainerImpl.java:1136)
  --omitted stack entries--
  Caused by:
  com.ibm.websphere.ssl.SSLException:
  java.lang.NullPointerException
  .at com.ibm.ws.ssl.config.SSLConfigManager.initializeServerSSL(
       SSLConfigManager.java:290)
  .at com.ibm.ws.ssl.core.SSLComponentImpl.initialize(
      SSLComponentImpl.java:170)
  .... 28 more
  Caused by:
  java.lang.NullPointerException
  .at java.util.Hashtable.put(Hashtable.java:632)
  .at java.util.Properties.setProperty(Properties.java:163)
  .at com.ibm.ws.ssl.config.SSLConfigManager.loadGlobalProperties(
      SSLConfigManager.java:1115)
  .at com.ibm.ws.ssl.config.SSLConfigManager.initializeServerSSL(
      SSLConfigManager.java:168)
  .
  
  Comparison of the cell level security.xml file before and after
  the addNode show that addNode corrupted some entries:
  
  The following property for CSIv2 inbound transport
  SSLCONFIG does not have a value in the new security.xml, and
  causes the NPE
  <properties xmi:id="Property_1284185040240"
  
  name="was.com.ibm.websphere.security.zos.csiv2.inbound.transport
  .sslconfig"/>
  
  The property added for CSIv2 outbound transport SSLCONFIG does
  contain a value:
  <properties xmi:id="Property_1284185040241"
  name="was.com.ibm.websphere.security.zos.csiv2.outbound.transpor
  t.sslconfig" value="XXXPLEX/DefaultIIOPSSL"/>
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of WebSphere Application Server   *
  *                  V7.0                                        *
  ****************************************************************
  * PROBLEM DESCRIPTION: After running AddNode command, newly    *
  *                      added Node Agent fails to start due     *
  *                      to NullPointerException.                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  This issue happens when the following custom property is
  defined in security.xml, but it doesn't have any value element.
  "was.com.ibm.websphere.security.zos.csiv2.inbound.transport.sslc
  onfig"
  During processing this custom property, the security code
  accesses the value without validating the value exists. As a
  result, a NullPointerException is thrown.
  

Problem conclusion

• With this fix, the value is accessed only if the value exists.
  
  APAR PM22724 is currently targeted for inclusion in Service
  Level (Fix Pack) 7.0.0.15 of WebSphere Application Server V7.0.
  
  Please refer to URL:
  //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM22579

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R700 PSY UK65061

     UP11/03/04 P F103

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.