APAR status
Closed as program error.
Error description
Certpath build failure if certificate contains BMP type string
will see errors similar to the following,
WSEC5086E: An exception in processing X509v3 certificate:
com.ibm.wsspi.wssecurity.SoapSecurityException:
WSEC5085E: Unable to build a valid CertPath:
javax.security.cert.CertPathBuilderException: No
end-entity certificate matching the selection criteria could be
found.
Local fix Problem summary
****************************************************************
* USERS AFFECTED: WebSphere Application Server users who are *
* utilizing web services security *
****************************************************************
* PROBLEM DESCRIPTION: Certpath build and validation fails *
* if the certificate contains BMPString. *
****************************************************************
* RECOMMENDATION: *
****************************************************************
If certificate contains a BMPString, Certpath build and
validation fails with the following error message:
javax.security.cert.CertPathBuilderException: No
end-entity certificate matching the selection criteria could
be found.
Problem conclusion
The problem is due to BMPString not handled properly in IBM
PKCS. A new IBM PKCS (build 20040406) resolving the issue
has been integrated.
Temporary fix
provided test fix
Comments
APAR information |
APAR number |
PQ87123 |
Reported component name |
WEBSPHERE AE AI |
Reported component ID |
5630A2200 |
Reported release |
00W |
Status |
CLOSED PER |
PE |
NoPE |
HIPER |
NoHIPER |
Special Attention |
NoSpecatt |
Submitted date |
2004-04-05 |
Closed date |
2004-04-30 |
Last modified date |
2004-04-30 |
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
Publications Referenced
|
Fix information |
Fixed component name |
WAS BASE 5.0 |
Fixed component ID |
5630A3600 |
Applicable component levels |
R003 PSY |
UP |
R00A PSY |
UP |
R00H PSY |
UP |
R00I PSY |
UP |
R00P PSY |
UP |
R00S PSY |
UP |
R00W PSY |
UP |
R103 PSY |
UP |
R10A PSY |
UP |
R10H PSY |
UP |
R10I PSY |
UP |
R10P PSY |
UP |
R10S PSY |
UP |
R10W PSY |
UP |
|