================================================================================
Installation

All Platforms:

 1. Shut down all running TIBCO applications.
 2. Back up the contents in the {TIBCO_HOME}\tra\5.9\hotfix\lib directory.
 3. Unzip the hotfix zip file to a temporary directory.
    For example, c:\tibco\trahotfix.
 4. Get the TIBCOUniversalInstaller version 3.3.0 V4 from TIBCO Support 
    FTP server https://mft.tibco.com and copy it to the directory 
	from where the hotfix is extracted. 
 5. Launch the TIBCOUniversalInstaller{.exe,bin} executable from this 
    temporary directory and install the hotfix into the {TIBCO_HOME} 
    of the base product.
 6. Restart the TIBCO applications.

================================================================================
Uninstallation

 1. Navigate to the <TIBCO_HOME>\tools\universal_installer.  
 2. Run the TIBCO Universal Installer and uninstall the hotfix using the wizard.
 
For more details, contact TIBCO Support.

================================================================================
Affected Files for 5.9.0_HF-006

The following files are installed by this hotfix. Note that some
files are platform-specific and are installed only on that platform.

All Platforms:
-------------

{TIBCO_HOME}\release_notes directory:
   - TIB_TRA_5.9.0_HF-006_readme.txt

{TIBCO_HOME}\tra\5.9\hotfix\lib directory:
   - TIBCrypt.jar
   - TIBCOrt.jar

Linux Platform only:
-------------------

All files within the {TIBCO_HOME}\tools\wrapper directory

================================================================================
Closed Issues in 5.9.0_HF-006 (This Release)

TRA-3744
Security in the TIBCO Administrator search functions has been improved.

================================================================================
Closed Issues in 5.9.0_HF-005

TCRT-59
The client-side fix for the SSLv3 vulnerability (CVE-2014-3566) issue was
incomplete for the non-default j2se provider; SSL client did not support 
TLS versions higher than 1.0 (j2se/ibm provider only).

================================================================================
Closed Issues in 5.9.0_HF-004

TCRT-56
To protect from the POODLE SSLv3 vulnerability (CVE-2014-3566), the SSLv3 
protocol is no longer supported for TLS/SSL connections. Only version 1.0 
or higher of TLS is supported. 

For backward compatibility with software that supports only SSLv3, you can 
enable the SSLv3 protocol by setting the following system-wide properties 
for client-side and server-side connections in the .tra file:
java.property.com.tibco.security.ssl.client.EnableSSLv3=true
java.property.com.tibco.security.ssl.server.EnableSSLv3=true

================================================================================
Closed Issues in 5.9.0_HF-003

TRA-3508
Domain data increased with each revision of the EAR file even when the 
max revision history was enabled.

TCRT-53
For Entrust, CertChainVerifier confused self-issued certificates for 
self-signed ones.

================================================================================
Closed Issues in 5.9.0_HF-002

TRA-3525
(Linux) When a C or C++ application was started, the wrapper caused the  
application to generate a core dump.
 
================================================================================
Closed Issues in 5.9.0_HF-001

TCRT-49
On IBM JRE the CertPath API behaved differently in the call chain_validate_jdk.
IBM JRE threw 'InvalidAlgorithmParameterException'error.

TCRT-51
Implemented 'setAllowedProtocolVersions', for SSLClient non-entrust providers. 

TCRT-52
BC can now validate certificate chains containing self-issued certificates.

================================================================================
TIBCO Product Support

 - For an overview of TIBCO Support Services, and information about
    getting started with TIBCO Product Support, visit this site:
    http://www.tibco.com/services/support

 - If you already have a valid maintenance or support contract,
    visit the TIBCO Product Support site: https://support.tibco.com
    Entry to this site requires a username and password. If you do
    not have a username, you can request for one.

 - Check the TIBCO Product Support site "Late Breaking News" page
    for product information that was not available at release time.

================================================================================
Copyright

Copyright (C) 1997-2015 TIBCO Software Inc. ALL RIGHTS RESERVED.
TIBCO Software Inc. Confidential Information.