IBM Support

Dashboard User Interface giving HTTP 404 error after upgraded to SBI 5.2.4.2

Troubleshooting


Problem

After upgrading Sterling B2B Integrator to version 5.2.4.2, the User Interface is not accessible anymore though Server is up and running in the background. UI to dashboard or mailbox or queueWatch or filegateway, all are giving http 404 error when accessed through their respective URL's.

Symptom

User Interface is not accessible. The noapp log consists of the below error.


[2014-04-28 14:27:48.137] ALL 000000000000 GLOBAL_SCOPE ERROR in WEBServerStartTHread : org.mortbay.util.MultiException[java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_3DES_EDE_CBC_MD5, java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_3DES_EDE_CBC_MD5]
[2014-04-28 14:27:48.137] ALL 000000000000 GLOBAL_SCOPE org.mortbay.util.MultiException[java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_3DES_EDE_CBC_MD5, java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_3DES_EDE_CBC_MD5]
[2014-04-28 14:27:48.137] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE at org.mortbay.jetty.Server.doStart(Server.java:186)
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:39)
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE at com.sterlingcommerce.woodstock.noapp.WebServerStartThread.run(WebServerStartThread.java:63)
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE at java.lang.Thread.run(Thread.java:804)
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_3DES_EDE_CBC_MD5
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE at com.ibm.jsse2.l.a(l.java:236)
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE at com.ibm.jsse2.m.<init>(m.java:105)
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE at com.ibm.jsse2.oc.setEnabledCipherSuites(oc.java:42)
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE at com.sterlingcommerce.woodstock.noapp.ssl.SCISslSocketConnector.newServerSocket(SCISslSocketConnector.java:238)
[2014-04-28 14:27:48.138] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE at org.mortbay.jetty.bio.SocketConnector.open(SocketConnector.java:73)
[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE at org.mortbay.jetty.AbstractConnector.doStart(AbstractConnector.java:272)
[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE at org.mortbay.jetty.bio.SocketConnector.doStart(SocketConnector.java:147)
[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:39)
[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE at org.mortbay.jetty.Server.doStart(Server.java:233)
[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:39)
[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE at com.sterlingcommerce.woodstock.noapp.WebServerStartThread.run(WebServerStartThread.java:63)
[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE

[2014-04-28 14:27:48.139] ALL 000000000000 GLOBAL_SCOPE at java.lang.Thread.run(Thread.java:804)

Cause

ERROR in WEBServerStartTHread : org.mortbay.util.MultiException[java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_3DES_EDE_CBC_MD5

The cipher suite SSL_RSA_WITH_3DES_EDE_CBC_MD5 is not supported.

Resolving The Problem

Check the customer_overrides.properties if any additional cipher suites have been configured. In this case, the below parameters have been found in the customer_overrides.properties.


security.dashboardCipherSuite=Strong
security.StrongCipherSuite=TLS_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_3DES_EDE_CBC_MD5, TLS_RSA_WITH_RC4_128_MD5

Though the list of Cipher Suites mentioned in the customer_overrides.properties does not have the cipher suite SSL_RSA_WITH_3DES_EDE_CBC_MD5 which is shown in the noapp log, it has been identified that the cipher suite TLS_RSA_WITH_3DES_EDE_CBC_MD5 is not supported as strong cipher with this version of Sterling B2B Integrator and needs to be removed from the list in customer_overrides.properties.

The error in the noapp log might mislead as this cipher SSL_RSA_WITH_3DES_EDE_CBC_MD5 is not used in any of the property files, but both the ciphers TLS_RSA_WITH_3DES_EDE_CBC_MD5 and SSL_RSA_WITH_3DES_EDE_CBC_MD5 are not supported as strong cipher suites and hence need to be removed.

To solve the issue and make the UI accessible:
1. Stop the system,
2. Update the customer overrides properties file by removing the unsupported cipher suites
3. Start the system

[{"Product":{"code":"SS3JSW","label":"IBM Sterling B2B Integrator"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Installation","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.2.4.2","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21672423