PK69062: WS-SECURITY IS NOT HANDLING MANAGED KEYSTORES PROPERLY FOR JAX-WS APPLICATIONS AND CAUSES CWWSS5417E ERROR.

Fixes are available

APAR status

Closed as program error.

Error description

When a centrally managed keystore is configured for use in a
token consumer callback handler or a trust anchor for a JAX-WS
application, the following runtime error occurs:

com.ibm.wsspi.wssecurity.core.SoapSecurityException: CWWSS5417E:
KeyStore: KeyStore referenced is not valid:
com.ibm.ws.wssecurity.confimpl.PrivateCommonConfig$KeyStoreConfI
mpl(type=[null], path=[null],
password=[XXXXXXXX]keyStoreRef=[KeyStore_1222801915170], ).

Local fix

If using a centrally managed keystore is required, edit the
WS-Security bindings.xml file for the application and replace
the value for KeyStoreRef with the desired centrally managed
keystore name.  The names avaliable for use appear in the 'Name'
field in the following panel in the administrative console:

Security->SSL certificate and key management->Key stores and
certificates

Problem summary

****************************************************************
* USERS AFFECTED:  WebSphere Application Server users of       *
*                  WS-Security enabled JAX-WS applications     *
*                  that want to use managed keystores          *
****************************************************************
* PROBLEM DESCRIPTION: WS-Security for JAX-WS applications     *
*                      is not properly handling managed        *
*                      keystores.                              *
****************************************************************
* RECOMMENDATION:  Install a fix pack that contains this APAR. *
****************************************************************
In the administrative console, a centrally managed keystore
can be configured for use as the Keystore in a token consumer
callback handler or a trust anchor in the WS-Security policy
set bindings for JAX-WS applications.

When a centrally managed keystore is configured for use in a
token consumer callback handler or a trust anchor, the
following runtime error occurs:

com.ibm.wsspi.wssecurity.core.SoapSecurityException: CWWSS5417E:
KeyStore: KeyStore referenced is not valid:
com.ibm.ws.wssecurity.confimpl.PrivateCommonConfig$KeyStoreConfI
mpl(type=[null], path=[null],
password=[XXXXXXXX]keyStoreRef=[KeyStore_1222801915170], ).
at
com.ibm.wsspi.wssecurity.core.SoapSecurityException.format(SoapS
ecurityException.java:77)
at
com.ibm.ws.wssecurity.confimpl.PrivateCommonConfig$KeyStoreConfI
mpl.validate(PrivateCommonConfig.java:364)

Problem conclusion

The WebSphere Application Server administrative console is
incorrectly updating the WS-Security policy set bindings for
JAX-WS applications when a centrally managed keystore is
selected as the Keytore in a token consumer callback handler
or a trust anchor.

The code has been changed to update and process the WS-Security
JAX-WS policy set bindings properly.

The fix for this APAR is currently targeted for inclusion in
fixpacks 6.1.0.25 and 7.0.0.5.  Please refer to the Recommended
Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PK69062
Reported component name
WEBSERVIC FEATU
Reported component ID
5724J0850
Reported release
610
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2008-07-15
Closed date
2009-03-18
Last modified date
2009-04-01

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBSERVIC FEATU
Fixed component ID
5724J0850

Applicable component levels

R610 PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
29 December 2021

Tips

PK69062: WS-SECURITY IS NOT HANDLING MANAGED KEYSTORES PROPERLY FOR JAX-WS APPLICATIONS AND CAUSES CWWSS5417E ERROR.

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R610 PSY

Document Information

Share your feedback

Need support?