PH41020: CSR FAILS VALIDATION DUE TO EXTRA LINES RFC822 NAME = USER@DOMAIN

APAR status

• Closed as program error.

Error description

• When creating a CSR and sending it to CA the CSR is failing
  validation.  Thie is due to extra line added below
  
  
  RFC822 Name = user@domain
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Extra information is added to CSR due   *
  *                      that causes issues from Certificate     *
  *                      Authorities.                            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Due to the design of the underlying APIs used to create a
  certificate and CSR, some extra information is added to the SAN
  email field when the DNS SAN field is populated.
  

Problem conclusion

• This APAR along with java 1.8.0_301 or higher certificate and CS
  can get created with to the extra information in the SAN email
  extension.  The updated java also allow for multiple values on
  the SAN DNS, email, and IP address fields.
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.22 and 9.0.5.11. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS EXPRESS

• Fixed component ID

  5724I6300

Applicable component levels