PH26401: ADD CERTIFICATE EXTENSION SUPPORT

APAR status

• Closed as new function.

Error description

• Adding certificate extension information to certificates during
  profile creation and the ability to customize custom certificate
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  *                  wanting extension information in            *
  *                  certificates.                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: Adding DNS name and Extended Key Usage  *
  *                      to                                      *
  *                      default certificates and a way to add   *
  *                      certificate extensions to custom        *
  *                      certificates.                           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Default certificates need to include extension information to
  help
  relieve some errors seen from browsers.  Also users need a way
  to
  provide extension information when creating custom
  certificates.
  

Problem conclusion

• Default certificates on newly created profiles will contain
  a
  DNS name and Extended key usage setting for server auth and
  client auth.  Users will be able to provide certificate
  extension information on custom certificates.
  
  The fix for this APAR is targeted for inclusion in fix pack
  9.0.5.5 and WAS 8.5.5.18. For more information, see
  'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP