IT44408: X-CLIENT-CERTIFICATE HEADER FAILS WITH BEGIN/END CERTIFICATE TAG

APAR status

• Closed as program error.

Error description

• For application authentication, while passing a certificate
  value in the header with X-Client-Certificate, contains the
  following lines:
  
  ---------BEGIN CERTIFICATE---------
  ---------END CERTIFICATE------------
  GW is unable to recognize the value and fails with the following
  error:
  { "httpCode": "401", "httpMessage": "Unauthorized",
  
   "moreInformation": "Client certificates in the API request for
  application authentication are invalid, malformed, or do not
  match the registered certificate." }
  

Local fix

• You can remove the following lines from the request header
  X-Client-Certificate: ---------BEGIN CERTIFICATE---------
  ---------END CERTIFICATE------------
  

Problem summary

• Certificate verification might fail when using the
  X-Client-Certificate header.
  

Problem conclusion

• Fix is available in 10.0.1.16, 10.5.0.8, and 10.5.2.0.
  
  For a list of the latest fix packs available, please see:
  https://www.ibm.com/support/pages/node/83105
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels