IT29326: VERIFY ACTION FAILS WITH 'CERTIFICATE NOT FOUND' IF ISSUER CONTAINS SPECIAL CHARACTERS

Fix packs for DataPower Gateway version 7.6

APAR status

• Closed as program error.

Error description

• Verify Action fails with 'certificate not found' although the
  correct certificate is in the validation credential of the
  verify action.
  This can occur if the signed message contains <X509IssuerName>
  and the name of the Issuer contains special characters.
  

Local fix

• In the Verify Action, set the "Optional Signer Certificate"
  parameter to the appropriate certificate object name.
  Example:  "name: my_cert"
  This forces the Verify Action to find the certificate
  immediately, instead of searching the domain using the
  IssuerName lookup method.
  

Problem summary

• DataPower might not find a certificate by issuer when the name
  contains special characters.
  

Problem conclusion

• Fix is available in 7.6.0.16 and 2018.4.1.7
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R18X PSY

     UP

• R760 PSY

     UP