PM50815: SSL CONFIGURATION WILL NOT SAVE IF THE KEYSTORE DOES CONTAIN A PERSONAL CERTIFICATE.

8.0.0.3: WebSphere Application Server V8.0 Fix Pack 3
8.0.0.4: WebSphere Application Server V8.0 Fix Pack 4
8.0.0.5: WebSphere Application Server V8.0 Fix Pack 5
8.0.0.6: WebSphere Application Server V8.0 Fix Pack 6
8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15

APAR status

• Closed as program error.

Error description

• When attempting to save an SSL configuration that does not
  contain a personal certicate in the keystore the following error
  will be seen in the console,
  
  Validation failed: The certificate does not exist in the XXXX
  keystore.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server V8.0.                                *
  ****************************************************************
  * PROBLEM DESCRIPTION: Attempt to save SSL configuration in    *
  *                      adminconsole results in: Validation     *
  *                      failed: The certificate does not        *
  *                      exist in the myKeystore                 *
  *                      keystore.                               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When attempting to save a SSL configuration or
  keystore that has no personal certificate in it. The save
  fails with the following message displayed on the adminconsole:
  Validation failed: The certificate does not exist in the XXXX
  keystore.
  In this case the customer did not want a personal certificate
  since this SSL configuration was only used on outbound
  connections.
  

Problem conclusion

• Code was changed to allow the saving of configurations that
  include keystores with no personal certificate.
  
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.0.0.3.  Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R800 PSY

     UP