IBM Support

PI71921: HTTP/TCP Proxy reports an error when using a non JKS based keystore type for outbound connections.

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • The HTTP/TCP proxy is throwing a ProxyRegistrationException when
    providing a keystore type other than JKS for the Outbound
    Keystore (see error below):
    
    Apr 13, 2016 11:40:01 AM com.greenhat.proxy.http.HTTPProxy init
    INFO: Loading outbound identity settings from
    'file:/c:/Program%20Files/IBM/RationalTestControlPanel/httptcp/r
    it_proxy.p12'
    Apr 13, 2016 11:40:01 AM com.greenhat.proxy.http.HTTPProxy init
    INFO: Secure outbound connections will use SSL_TLS and identity
    from
    'file:/c:/Program%20Files/IBM/RationalTestControlPanel/httptcp/r
    it_proxy.p
    12'
    Apr 13, 2016 11:40:02 AM com.greenhat.proxy.Main main
    SEVERE: Failed to start HTTP(S) proxy
    com.greenhat.vie.comms.proxy.util.ProxyRegistrationException:
    Invalid
    HTTPS settings
    at com.greenhat.proxy.http.HTTPProxy.init(HTTPProxy.java:121)
    at com.greenhat.proxy.Main.main(Main.java:35)
    Caused by: java.security.KeyStoreException: pkcs not found
    at java.security.KeyStore.getInstance(KeyStore.java:640)
    at.java:69)
    at com.greenhat.proxy.http.HTTPProxy.init(HTTPProxy.java:117)
    ... 1 more
    Caused by: java.security.NoSuchAlgorithmException: pkcs KeyStore
    not
    available
    at
    sun.security.jca.GetInstance.getInstance(GetInstance.java:172)
    at java.security.Security.getImpl(Security.java:707)
    at java.security.KeyStore.getInstance(KeyStore.java:637)
    

Local fix

  • Below are working and failing HTTPs proxy definitions from a
    sample registration.xml file.
    
    <!-- WORKING HTTPS WITH PKCS
    <https-proxy port="3129" bind-address=""
    serverProtocol="SSL_TLS, TLS"
    keyStoreFile="rit_proxy.p12" keyStoreType="pkcs12"
    keyStoreAlias="rit_proxy" keyStorePassword="generali"
    signingAlgorithm="SHA1withRSA" plainCommsPort="3131"
    clietProtocol="SSL_TLS, TLS"
    outboundkeyStoreFile="rit_proxy.p12"
    outboundKeyStoreType="pkcs12"
    outboundKeyStorePassword="generali">
    </https-proxy>
    -->
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Users of the Rational Integration Tester HTTP Proxy using    *
    * onward SSL connections.                                      *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * When configuring onward SSL connections using a keystore     *
    * type other than JKS, an exception is thrown.                 *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    

Problem conclusion

  • A fix is included in release 9.1.0 of Rational Integration
    Tester.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI71921

  • Reported component name

    RATL INTEGRA TE

  • Reported component ID

    5725G79IT

  • Reported release

    871

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-11-07

  • Closed date

    2017-04-03

  • Last modified date

    2017-04-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    RATL INTEGRA TE

  • Fixed component ID

    5725G79IT

Applicable component levels

  • R800 PSN

       UP

  • R801 PSN

       UP

  • R850 PSN

       UP

  • R851 PSN

       UP

  • R860 PSN

       UP

  • R870 PSN

       UP

  • R871 PSN

       UP

  • R900 PSN

       UP

  • R901 PSN

       UP

  • R910 PSY

       UP



Document information

More support for: Rational Test Workbench

Software version: 871

Reference #: PI71921

Modified date: 03 April 2017