PH37067: CWPKI0045E CORRECTION

APAR status

• Closed as program error.

Error description

• The CWPKI0045E indicates a signer with a SubjectDN
  was sent from a remote server, and that a signer with that
  SubjectDN may need to be added to the truststore as seen below:
  
  ----
  CWPKI0045E: SSL HANDSHAKE FAILURE: A signer with SubjectDN
  ?CN=hostname,OU=Company" was sent from a target host.
  The signer may need to be added to local trust store
  ?safkeyring:///WASkeyring" located in SSL configuration
  alias ?NodeDefaultSSLSettings" loaded from SSL configuration
  file ?security.xml?.
  ----
  
  The certificate with SubjectDN is the personal certificate sent
  from the remote server, and the signer certificate that signed
  that personal certificate would need to be added to the
  truststore.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: A serviceability improvement to the     *
  *                      CWPKI0045E message to make the proposed *
  *                      solution more precise.                  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  A serviceability improvement to the CWPKI0045E message to make
  the
  proposed solution more precise.
  

Problem conclusion

• The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.21 and 9.0.5.10. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R850 PSY

     UP