PK71942: CWPKI0022E COM.IBM.SSL.ALIAS IN SOAP.CLIENT.PROPS NOT HONORED, ONLY DEFAULTSSLSETTINGS IN SSL.CLIENT.PROPS IS USED.

Fixes are available

APAR status

Closed as program error.

Error description

The soap.client.props file allows one to specify the SSL
configration to use based on the following property:
com.ibm.ssl.alias. The actual SSL configuration is defined
in ssl.client.props file, while soap.client.props has a
reference to the SSL configuration alias to be used.
.
By default: com.ibm.ssl.alias=DefaultSSLSettings
.
However, if the customer chooses an alternate value for
com.ibm.ssl.alias, this does not get honored, when the
-user and -password parameters are also passed via the command
line. Instead the default of DefaultSSLSettings is used.
.
For example, if the customer wants to use a new SSL
configuration called WsadminSSLSettings (defined in
ssl.client.props), he / she would code:
com.ibm.ssl.alias=WsadminSSLSettings
.
However, WsadminSSLSettings will NOT be in effect if the -user
and -password arguments are also supplied to wsadmin.sh. Instead
DefaultSSLSettings will be in effect which may result SSL
handshake errors: CWPKI0022E.

Local fix

There are two local fixes for this problem. Either one can be
used :
1. Do not use the -user and -password option in the command
line. Instead pass the userids using in soap.client.props:
.
com.ibm.SOAP.loginUserid=ibmuser
com.ibm.SOAP.loginPassword=ibmuser
.
2. In the soap.client.props file, code a sslConfig property in
addition to com.ibm.ssl.alias. For example, if you intend to use
WsadminSSLSettings, code the following two properties:
.
com.ibm.ssl.alias=WsadminSSLSettings
sslConfig=WsadminSSLSettings

Problem summary

****************************************************************
* USERS AFFECTED:  All users of WebSphere Application Server   *
*                  V6.1.0.                                     *
****************************************************************
* PROBLEM DESCRIPTION: The com.ibm.ssl.alias property in       *
*                      soap.client.props is not honored and    *
*                      the DefaultSSLSettings are used         *
*                      instead.  As a workaround, customers    *
*                      could add a property named sslConfig    *
*                      to soap.client.props with the same      *
*                      value as the com.ibm.ssl.alias          *
*                      property.                               *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
Externally, the property name for SSL configuration is
com.ibm.ssl.alias in the soap.client.props file, but
internally the SOAP connector uses a property named sslConfig.
 The AdminClientFactory creates a sslConfig property from the
com.ibm.ssl.alias property, but not when certain combinations
of other properties are present.

Problem conclusion

AdminClientFactory was changed to always creates a sslConfig
property from the com.ibm.ssl.alias property for SOAP
connections.
APAR PK71942 is currently targeted for inclusion in
Service Level (Fix Pack) 6.1.0.25 of WebSphere
Application Server V6.1 for z/OS.

Temporary fix

Comments

APAR Information

APAR number
PK71942
Reported component name
WEBSPHERE FOR Z
Reported component ID
5655I3500
Reported release
610
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2008-09-11
Closed date
2009-01-12
Last modified date
2009-07-01

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

PK90172

Fix information

Fixed component name
WEBSPHERE FOR Z
Fixed component ID
5655I3500

Applicable component levels

R610 PSY UK47214
UP09/06/22 P F906

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
28 December 2021

Tips

PK71942: CWPKI0022E COM.IBM.SSL.ALIAS IN SOAP.CLIENT.PROPS NOT HONORED, ONLY DEFAULTSSLSETTINGS IN SSL.CLIENT.PROPS IS USED.

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R610 PSY UK47214

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

Document Information

Share your feedback

Need support?