The CAWA Agent 11.3.x on AIX configured as ftp ssl client throws java exception java.security.NoSuchAlgorithmException:

Products

• Workload Automation Agent
• DSERIES- SERVER
• CA Workload Automation DE - System Agent (dSeries)

Issue/Introduction

Trying to run an FTP SSL session between IBM AIX and MS Windows where Agent installed on AIX acts as an ftp ssl client, and installed on Windows as an ftp ssl server. The SSL certificate has been set properly in both servers and the client key stores. 

While testing, the FTP job submitted from CAWA DE server failed with the exception

Receiving "java.security.NoSuchAlgorithmException: SunX509 TrustmanagerFactory not available". 

Environment

CA Workload Automation DE 12.x, CA Workload Automation Agent 11.3.x, IBM AIX 6.1, MS Windows 2012

Cause

IBM jre built-in to the CAWA Agent on AIX uses the IbmX509 validation algorithm however the default logical setting of the Agent keeps the SunX509.

Resolution

Add the parameter in the Agent's agentparm.txt file located in Agent installation directory on AIX, and restart this agent. 

ftp.ssl.provider=IbmX509

Additional Information

ftp.ssl.provider=IbmX509

Specifies an AIX parameter that supports IBM JSSE (Java Secure Socket Extension), a Java implementation of SSL and TLS.

Note: Do not change the value.  

CA WA Agent for UNIX, Linux, Windows, or i5/OS Agent Parameters Used for Troubleshooting