PI55718: RDZ SSL CERTIFICATES IMPORT WIZARD LOOPS

Rational Developer for System z Fix Pack 1 (9.1.1.4) for 9.1.1.
Rational Developer for System z Fix Pack 1 (9.1.1.5) for 9.1.1.
Rational Developer for System z Fix Pack 1 (9.1.1.6) for 9.1.1.
Rational Developer for System z Fix Pack 1 (9.1.1.7) for 9.1.1.
Rational Developer for System z Fix Pack 1 (9.1.1.8) for 9.1.1
Rational Developer for System z Fix Pack 9 (9.1.1.9) for 9.1.1

APAR status

• Closed as program error.

Error description

• In Rational Developer for System z - RDz - v9.1.1, attempt to
  connect to RDz server results in the SSL certificates import
  wizard to be displayed in a loop.
  
  Steps to reproduce:
  
  1. Connect to RDz server named server1
  2. SSL certificates import wizard is displayed
  3. Click OK: the SSL certificates are imported and the
  connection is established
  4. Connect to RDz server named server2 which has at least one
  common SSL certificate with server1
  5. SSL certificates import wizard is displayed
  6. Click OK:
  - SSL traces show error:
  Worker-9, SEND TLSv1.1 ALERT:  fatal, description =
  certificate_unknown
  Worker-9, handling exception:
  javax.net.ssl.SSLHandshakeException:
  java.security.cert.CertificateException
  
  - SSL import wizard is again displayed requesting to import
  the same certificate as step 5.
  
  Steps 5 and 6 repeats for ever.
  

Local fix

• Import manually all certificates from both server1 and server2
  from menu
  Window > Preferences > Remote Systems > SSL/TLS
  

Problem summary

• In Rational Developer for System z - RDz - v9.1.1, attempt to
  connect to RDz server results in the SSL certificates import
  wizard to be displayed in a loop.
  
  Steps to reproduce:
  
  1. Connect to RDz server named server1
  2. SSL certificates import wizard is displayed
  3. Click OK: the SSL certificates are imported and the
  connection is established
  4. Connect to RDz server named server2 which has at least one
  common SSL certificate with server1
  5. SSL certificates import wizard is displayed
  6. Click OK:
  - SSL traces show error:
  Worker-9, SEND TLSv1.1 ALERT:  fatal, description =
  certificate_unknown
  Worker-9, handling exception:
  javax.net.ssl.SSLHandshakeException:
  java.security.cert.CertificateException
  
  - SSL import wizard is again displayed requesting to import
  the same certificate as step 5.
  
  Steps 5 and 6 repeats forever.
  

Problem conclusion

• The problem listed in this APAR has been resolved with
  IBM Rational Developer for System z V9.1.1.4 Fix Pack which
  is available from the Recommended Fixes support download page:
  http://www-1.ibm.com/support/docview.wss?rs=2294&uid=swg27006335
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL DEV FOR SY

• Fixed component ID

  5724T0700

Applicable component levels

• R911 PSY

     UP