IBM Support

PI64351: HOST NAMES FOR PHYSICAL TRANSPORTS ARE CASE-SENSITIVE, CAUSING TLS NEGOTIATIONS TO FAIL .

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Tested in RIT 9.0
    In order to test I did this:
    
    1. Create an HTTPS transport for www.gooGLe.co.uk
    2. Switch on SSL and test connection works with the default
    "trust all"
    3. Now export the certificate from that site from your browser
    and save it.
    4. Create a new Identity Store and import this cert.
    5. Change the transport and set "Server certificates to trust"
    to be your Identity Store.
    6. Now test connections fails with:
    
    [CRRIT1707E] Could not create a connection to the HTTP server :
    java.security.cert.CertificateException: The names on the
    security certificate: "[www.google.co.uk]" do not match the name
    of the site "WWW.gooGle.CO.uk"
    
    JC confirms that this is a defect and can see why in the code.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All users of Rational Integration Tester working with host   *
    * names for physical transports                                *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * Host names for physical transports are case-sensitive,       *
    * causing TLS negotiations to fail.                            *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Upgrade to Rational Integration Tester v9.0.1 which includes *
    * a fix for this issue                                         *
    ****************************************************************
    

Problem conclusion

  • A fix for this issue was provided in version 9.0.1 of Rational
    Integration Tester.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI64351

  • Reported component name

    RATL INTEGRA TE

  • Reported component ID

    5725G79IT

  • Reported release

    870

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-06-16

  • Closed date

    2016-09-20

  • Last modified date

    2016-09-20

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    RATL INTEGRA TE

  • Fixed component ID

    5725G79IT

Applicable component levels

  • R800 PSN

       UP

  • R801 PSN

       UP

  • R850 PSN

       UP

  • R851 PSN

       UP

  • R860 PSN

       UP

  • R870 PSN

       UP

  • R871 PSN

       UP

  • R900 PSN

       UP

  • R901 PSY

       UP



Document information

More support for: Rational Test Workbench

Software version: 8.7

Reference #: PI64351

Modified date: 20 September 2016