PH10457: REPLACECERTIFICATE IS NOT HORNED TO REPLACES A PERSONAL CERTIFICATE WITH ANOTHER PERSONAL CERTIFICATE

9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• replaceCertificate is not horned to replaces a personal
  certificate with another personal certificate
  
  replaceCertificate should replace all certificates with the same
  serial number in all keystores with in WAS SSL.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Replace certificate function does not   *
  *                      update all keystores.                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The replace certificate function would not delete the old
  personal certificate on other keystores, and the alias name of
  the new cert would be incorrect on other keystores.
  

Problem conclusion

• This fix corrects the replace certificate functions's
  behavior, when the replace cert. function is called in one
  keystore, if the same certificate exists in other keystores,
  all of those certificate references will be updated.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.17 and 9.0.5.1
  Please refer to the Recommended Updates page for delivery
  information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP