IBM Support

IC79134: DP:GET-CERT-DETAILS ESCAPES NON-ASCII CHARACTERS IN ISSUERALTNAME AND SUBJECTALTNAME EXTENSIONS

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as fixed if next.

Error description

  • If a certificate contains non-ASCII characters in the
    issuerAltName or subjectAltName extensions, those characters
    will be returned incorrectly as escaped characters
    from the dp:get-cert-details() extension function.  This also
    affects the WebGUI certificate details display.
    
    As an example when the output is UTF-8, the two-byte
    character LATIN SMALL LETTER A WITH ACUTE (hex c3a1) will
    incorrectly appear as eight one-byte characters:
    \xC3\xA1 (hex 5c7843335c784131).
    

Local fix

Problem summary

  • DataPower customers using the dp:get-cert-details() extension
    function on certificates containing issuerAltName or
    subjectAltName extensions with a field of type directoryName
    will get incorrect output for non-ASCII characters in those
    fields.
    

Problem conclusion

  • This will be fixed in a future release.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC79134

  • Reported component name

    DATAPWER LL APL

  • Reported component ID

    DP1234LMM

  • Reported release

    402

  • Status

    CLOSED FIN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2011-10-10

  • Closed date

    2011-11-16

  • Last modified date

    2013-12-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

  • R373 PSN

       UP

  • R380 PSN

       UP

  • R381 PSN

       UP

  • R382 PSN

       UP

  • R401 PSN

       UP

  • R402 PSN

       UP



Document information

More support for: WebSphere DataPower Low Latency Appliance XM70

Software version: 4.0.2

Reference #: IC79134

Modified date: 10 December 2013