Exception "SunX509 KeyManagerFactory not available" thrown while enabling HTTPS on an AIX machine.

Exception "SunX509 KeyManagerFactory not available" thrown while enabling HTTPS on an AIX machine.

book

Article ID: KB0094448

calendar_today

Updated On:

Products Versions
TIBCO Administrator -
Not Applicable -

Description

Resolution:
Description:
==========
While enabling HTTPS on an AIX machine, the exception: "IOException: SunX509 KeyManagerFactory not available" appears.


Environment:
===========
TIBCO Runtime Agent(TRA) 5.6.x, 5.7.x ,
TIBCO Administrator 5.6.x, 5.7.x,
AIX


Symptoms:
========
The exception stack resembles the following:
<----------------
ERROR main org.apache.catalina.startup.Catalina - Catalina.start
LifecycleException:  Protocol handler initialization failed: java.io.IOException: SunX509 KeyManagerFactory not available
        at org.apache.catalina.connector.Connector.initialize(Connector.java:1004)
----->


Cause:
======
This is a known issue of Tomcat on AIX. For details refer to: https://issues.apache.org/bugzilla/show_bug.cgi?id=45500

By default, the certificate encoding algorithm is Sun's implementation SunX509. For IBM JVMs the IbmX509 algorithm should be specified.

See http://tomcat.apache.org/tomcat-5.5-doc/config/http.html#SSL_Support


Solution
=======
On AIX platforms where IBM's JRE is used add the following attribute to the HTTPS Connector in &ltAdmin_Domain_Home>/&ltdomainName>/tomcat/conf/server.xml.

    "algorithm=IbmX509"

Issue/Introduction

Exception "SunX509 KeyManagerFactory not available" thrown while enabling HTTPS on an AIX machine.