Using IBM Java 7 or 8 with the iProcess Web Services Server Plug-in on AIX
Article ID: KB0081040
Updated On:
| Products | Versions |
|---|---|
| TIBCO iProcess Engine (Oracle) | 11.6.1.1 |
Description
TIBCO iProcess Web Services Server Plug-in must be installed using a 32-bit Java 1.5.JRE
Post install the Jetty server can be manually configured to use an IBM Java 1.7 or 1.8 JRE
After modifying the configuration the following error is generated when Jetty is started:
2018-03-05 10:41:57,641 [ERROR] [main] DBPoolMBean - Unable to decrypt password
org.bouncycastle.crypto.InvalidCipherTextException: pad block corrupted
The database user password is encrypted - the error indicates that the plugin is unable to decrypt the password.
The iProcess Web Services Server Plugin is therfore unable to connect to the iProcess database.
Post install the Jetty server can be manually configured to use an IBM Java 1.7 or 1.8 JRE
After modifying the configuration the following error is generated when Jetty is started:
2018-03-05 10:41:57,641 [ERROR] [main] DBPoolMBean - Unable to decrypt password
org.bouncycastle.crypto.InvalidCipherTextException: pad block corrupted
The database user password is encrypted - the error indicates that the plugin is unable to decrypt the password.
The iProcess Web Services Server Plugin is therfore unable to connect to the iProcess database.
Issue/Introduction
TIBCO iProcess Web Services Server Plug-in must be installed using a 32-bit Java 1.5.JRE.
Post install the Jetty server can be manually configured to use an IBM Java 1.7 or 1.8 JRE.
After modifying the configuration the following error is generated when Jetty is started:
2018-03-05 10:41:57,641 [ERROR] [main] DBPoolMBean - Unable to decrypt password
org.bouncycastle.crypto.InvalidCipherTextException: pad block corrupted
Environment
TIBCO iProcess Engine (Oracle) 11.6.1 on AIX
TIBCO iProcess Web Services Server Plug-in 11.3.0.1 on AIX
IBM Java JRE 1.7 or 1.8
AIX 7.x platform
Resolution
1. Edit the file JRE_HOME/lib/java.security and comment out the line:
securerandom.source=/dev/urandom
where JRE_HOME is the path to the IBM JRE used by the server plug-in (specified in the jetty.sh script)
2. Restart the jetty server
This resolution is only appropriate to the iProcess Web Services Server Plug-in on AIX using an IBM 1.7 or 1.8 JRE.
NOTE:
The encryption of passwords is JRE version dependent.
After configuring the plug-in to use a different version of a Java JRE you must run the Password Manager (passwordmanager.sh) and generate the encrypted password using the newly configured version if the JRE.
This must be done after making the above change.
securerandom.source=/dev/urandom
where JRE_HOME is the path to the IBM JRE used by the server plug-in (specified in the jetty.sh script)
2. Restart the jetty server
This resolution is only appropriate to the iProcess Web Services Server Plug-in on AIX using an IBM 1.7 or 1.8 JRE.
NOTE:
The encryption of passwords is JRE version dependent.
After configuring the plug-in to use a different version of a Java JRE you must run the Password Manager (passwordmanager.sh) and generate the encrypted password using the newly configured version if the JRE.
This must be done after making the above change.
Additional Information
TIBCO iProcess Web Services Server Plug-in 11.3.0 Installation Guide
Feedback
Yes
No
Powered by
