Fix (APAR):  PI54960

Status:  Fix

Release:  8.5.5.8,8.5.5.7

Operating System:  AIX,HP-UX,IBM i,Inspur K-UX,Linux,Solaris,Windows,iOS,z/OS

Supersedes Fixes:  

CMVC Defect:  xxxxxx

Byte size of APAR:  638273

Date: 2016-02-03

Abstract:  provide property to set Java security algorithm related properties

Description/symptom of problem:  
PI54960 resolves the following problem:

ERROR DESCRIPTION:                                              
WebSphere Application Server properties that will be read and   
then use the value to set java Security algorithm property if   
not already set in the java.security file.                      

LOCAL FIX:                                                      

PROBLEM SUMMARY

USERS AFFECTED:
 All users of IBM WebSphere Application
Server

PROBLEM DESCRIPTION:
The server needs a way to set java
security properties
java.tls.disabledAlgorithms and
java.certpath.disabledAlgorithms.

RECOMMENDATION:
None

WebSphere Application Server will set
java.tls.disabledAlgorithms and
java.certpath.disabledAlgorithms properties programmatically.

PROBLEM CONCLUSION:                                             
The application server will set java.tls.disabledAlgorithms and 
java.certpath.disabledAlgorithms properties by default.  If     
users do not want them to be set they can set WebSphere         
Application Server security properties                          
com.ibm.websphere.tls.disabledAlgorithms                        
and com.ibm.websphere.certpath.disabledAlgorithms to none.      
The Application Server can also use customized values for the   
java security property by setting the security properties       
com.ibm.websphere.tls.disabledAlgorithms                        
and com.ibm.websphere.certpath.disabledAlgorithms to the        
custom value.                                                   
                                                                
                                                                
The fix for this APAR is currently targeted for inclusion in    
fix pack 7.0.0.41, 8.0.0.13, and 8.5.5.10.  Please refer to the 
Recommended Updates                                             
page for delivery information:                                  
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980   


Directions to apply fix:  
NOTE: Mark with an X the:
1) Release the fix applies to
2) The Editions that apply
3) And then DELETE THIS NOTE

Fix applies to Editions:
Release 8.5
_X_ Application Server (Express or BASE)
_X_ Network Deployment (ND)
__ Liberty Core
__ Edge Components
__ Developer

Install Fix to all WebSphere installations unless special instructions are included below.

Special Instructions: None

NOTE:
The user must:
* Logged in with the same authority level when unpacking a fix, fix pack or refresh pack.
* Be at V1.4.3 or newer of the Installation Manager. Certain iFixes may require a newer version of the Installation Manager and the Installation Manager will inform you during the installation process if a newer version is required.

The IBM Knowledge Center can provide details, if needed, on the use of the Installation Manager to apply the iFixes.
http://publib.boulder.ibm.com/infocenter/install/v1r4/index.jsp.  Shutdown WebSphere Application Server before applying the iFixes.  Restart WebSphere Application Server after applying the iFixes.



Directions to remove fix:  

The IBM Knowledge Center can provide details, if needed, on the use of the Installation Manager to remove the iFixes.
http://publib.boulder.ibm.com/infocenter/install/v1r4/index.jsp.  Shutdown WebSphere Application Server before removing the iFixes.  Restart WebSphere Application Server after removing the iFixes.



Directions to re-apply fix:  
1) Shutdown WebSphere Application Server.

2) Follow the Fix instructions to apply the fix.

3) Restart WebSphere Application Server.





Additional Information: