IT43623: HTTPLISTENER MAY NOT SEND INTERMEDIATE AND ROOT CERTIFICATES

APAR status

• Closed as program error.

Error description

• Httplistener is presenting only the leaf certificate even when
  the CA certificate is present in the keystore.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM App Connect Enterprise V11.0.0.18 or higher
  fixpack and V12.0.5 <span style="background-color:rgb(255, 255,
  255)">or higher fixpack using web services with SSL.</span>
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  When a remote client attempts to invoke an HTTPS web service
  exposed as a message flow, the HTTP listener may return only the
  server certificate during the handshake process despite the
  complete certificate chain being present in the Java Keystore.
  

Problem conclusion

• The product has been modified to ensure the HTTP listeners
  present the client with the correct intermediate certificates
  during an SSL/TLS handshake.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v11.0      11.0.0.22
  v12.0      12.0.9.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0550

Applicable component levels