Applying IBM Java Cryptography Extension (JCE) to Vibe server

  • Document ID:7016069
  • Creation Date:15-Jan-2015
  • Modified Date:20-Feb-2015
    • Micro Focus Products:
      Vibe

Environment

Novell Vibe 3.4 with IBM JDK

Situation

Your Vibe 3.4 server uses the IBM JDK and after applying the Vibe 3.4 Hot Patch 1, some Internet Explorer and Vibe Add-In for Microsoft Office users are experiencing connection problems relating to SSL/TLS handshake.

Resolution

Please follow these steps to apply the IBM JCE to your Vibe server:

Note: These steps are intended for a system that has the IBM JDK 1.7.0 installed via the SUSE SDK repository. For newer versions of JDK, the steps will remain the same as long as you follow the JDK version in the paths/links.
  1. Verify that the following files exist on your system:
    a. /etc/alternatives/jce_1.7.0_ibm_local_policy
    b. /etc/alternatives/jce_1.7.0_ibm_us_export_policy
     
  2. Download the Unrestricted JCE Policy files for the IBM SDK for Java from the following site:
    https://www14.software.ibm.com/webapp/iwm/web/reg/pick.do?source=jcesdk&lang=en_US

  3. Verify that the zip file downloaded in Step 2 is called "unrestrictedpolicyfiles.zip" and contains the following two files:
    a. local_policy.jar
    b. US_export_policy.jar
     
  4. Login to the Filr server as user 'root' and create the following directory:
    mkdir -p /usr/lib64/jvm-private/java-1.7.0-ibm/jce/unrestricted
     
  5. Copy the "unrestrictedpolicyfiles.zip" downloaded in Step 2 to the directory you created in Step 4
     
  6. Change your directory to the unrestricted directory and Unzip the "unrestrictedpolicyfiles.zip" file:
    cd /usr/lib64/jvm-private/java-1.7.0-ibm/jce/unrestricted
    unzip unrestrictedpolicyfiles.zip
     
  7. Stop the Vibe service:
    /etc/init.d/teaming stop
     
  8. Remove the existing links:
    rm /etc/alternatives/jce_1.7.0_ibm_local_policy
    rm /etc/alternatives/jce_1.7.0_ibm_us_export_policy
     
  9. Create the new links:
    ln -s /usr/lib64/jvm-private/java-1.7.0-ibm/jce/unrestricted/local_policy.jar /etc/alternatives/jce_1.7.0_ibm_local_policy
    ln -s /usr/lib64/jvm-private/java-1.7.0-ibm/jce/unrestricted/US_export_policy.jar /etc/alternatives/jce_1.7.0_ibm_us_export_policy
     
  10. Start the Vibe service:
    /etc/init.d/teaming start

Once Vibe is restarted, please check the /opt/novell/teaming/apache-tomcat/logs/catalina.out file to ensure that there were no errors encountered during Vibe startup.