IT24680: KEYSTORE OPTION FOR CICS CONFIGURABLE SERVICE

APAR status

• Closed as requirement.

Error description

• Keystore option for CICS configurable service to configure a
  different  keystore file for CICS connections.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM App Connect Enterprise v11 and IBM Integration
  Bus V10 wishing to use SSL to connect to CICS.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  When using SSL with the CICSRequest node, prior to this change,
  certificates used to secure the connection must be located in
  the Integration Server keystore. This caused particular issue
  when an update was required to the certificates.
  

Problem conclusion

• A pair of properties have been added to the CICSConnection
  configurable service(v10) / Policy (v11) to allow a specific
  keystore to be used by the CICSRequest node.
  
  v10
  keystoreFile - This property specifies the fully-qualified path
  to the location of the keystore that is to be used when using an
  SSL connection. If this value is not specified, the keystore
  that is configured for the integration server will be used. The
  CICS Request node uses this as the store for the private and
  public certificates used to secure the connection to CICS.
  keystorePass - This property specifies the security identity to
  be used for accessing the keystore.
  
  v11
  sslKeystoreLocation - This property specifies the
  fully-qualified path to the location of the keystore that is
  used when using an SSL connection. If this value is not
  specified, the keystore that is configured for the integration
  server will be used. The CICS Request node uses this as the
  store for  the private and public certificates used to secure
  the connection to CICS.
  sslKeystoreSecurityIdentity - This property specifies the
  security identity to be used for accessing the keystore.
  

Temporary fix

Comments

• A pair of properties have been added to the CICSConnection
  configurable service
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels