An administrator domain cannot be started if configured to use HTTPs transport on AIX 5.1 and 5.2 platforms

An administrator domain cannot be started if configured to use HTTPs transport on AIX 5.1 and 5.2 platforms

book

Article ID: KB0086301

calendar_today

Updated On:

Products Versions
TIBCO Administrator -
Not Applicable -

Description

Description:
Symptoms
========
When you try to start an administrator domain which was configured to use HTTPs transport on AIX 5.1 and 5.2 platforms, you'll get the following exception and the Administrator will not start:
Catalina.start: LifecycleException:  null.open:  java.security.NoSuchAlgorithmException: Class com.ibm.jsse.ba configured for SSLContext not a SSLContext.

Impact
======
Loss of Functionality

Workaround
==========
Do not enable HTTPs on administrator domains on AIX 5.1 or 5.2 platforms.

Cause
=====
Tomcat (TIBCO Administrator) uses Sun's JSSE.  The IBM JRE supplies Tomcat with the IBM JSSE implementation by default.

Resolution
==========
Use Sun's JSSE provider in the JRE on AIX to solve this.

To do this,
     * copy the JSSE (jsse1.0.3) jars (jcert.jar, jnet.jar, jsse.jar) in to &lttibcohome>/tpcl/5.1/lib folder.
     * make the following changes to the file TIBCO_HOME/jre/1.4.1/lib/security/java.security:
             comment out the line:
                     security.provider.1=com.ibm.jsse.IBMJSSEProvider
             add the line:
                     security.provider.1=com.sun.net.ssl.internal.ssl.Provider

In the next TRA release (5.1.3+), we will bundle Sun's JSSE on AIX. You will still have to manually set TIBCO_HOME/jre/1.4.1/lib/security/java.security as indicated above in order to use HTTPs.
Symptoms:

Cause:

Issue/Introduction

An administrator domain cannot be started if configured to use HTTPs transport on AIX 5.1 and 5.2 platforms

Attachments

An administrator domain cannot be started if configured to use HTTPs transport on AIX 5.1 and 5.2 platforms get_app