fighting for truth, justice, and a kick-butt lotus notes experience.

Old IBM Apple APNS Push Certificate used for Verse expired on Friday 03.02.17

 6 Februar 2017 14:03:25
If you are still running an older IBM Traveler version as 9.0.1.15 like 9.0.1.14, you will notice since Friday that the Push Notification for IBM Verse for iOS are no longer working.

You will see many error messages on the console:

06.02.2017 11:59:08   Traveler: SEVERE  *system Couldn't send message after 3 retries, Message(Id=692311; Token=8C720F7F9B96D30C184445840EF0D0D925BC8C269618C7523E0B98EE9B61A03E; Payload={"aps":{"badge":14,"content-available":1,"alert":"E-Mail von test.de","sound":"v)"},"LGUID":"2068982","FLAGS":"1001","account":"1"}) Exception Thrown: javax.net.ssl.SSLException: Received fatal alert: internal_error


The reason is that the APNS certificate used for IBM Verse for iOS expired on Friday 03th Feb. 2017. The certificate is part of the Traveler installation package. And the IBM Verse APNS P12 file of Traveler 9.0.1.14 is expired.

To solve it you will have two options:

1. Option: Move on to Traveler 9.0.1.15

Update your server to the latest version, but have in mind that there is still a known issue:
hotfix-via-pmr-available-for-traveler-9.0.1.15-standalone-issue.htm


2. Option: Stay on 9.0.1.14 and only change the P12 certificate files.

You can replace your existing certs and use this three files, which I copied from my Traveler 9.0.1.15 server. The certs are valid until August 12 2017.

PushAPNSAppleVerseProduction.zip

Extract the zip-file and copy the three P12-files to your Traveler server: notes_data/traveler/cfg  and restart your Traveler server


You can check, if the Push Notifications are working and how long the certs are valid by executing this command:

tell traveler push cmstatus


It should look like this:

> tell traveler push cmstatus
06.02.2017 13:51:46   Traveler: ########## Connection Manager (Mon Feb 06 13:51:46 CET 2017) ##########
06.02.2017 13:51:46   Traveler: Description: Statistics for current connections and peak connections.  List of all current connections between devices and the server.
....
06.02.2017 13:51:46   Traveler: ########## Connection SMS Sender (Mon Feb 06 13:51:46 CET 2017) ##########
06.02.2017 13:51:46   Traveler: Description: List of all pending SMS messages to be sent.
06.02.2017 13:51:46   Traveler: -- SMS-DelQ --
06.02.2017 13:51:46   Traveler: DelayQueue (Name: SMS-DelQ, Size: 0 object(s), Head: null, Current Date: Mon Feb 06 13:51:46 CET 2017)
06.02.2017 13:51:46   Traveler:   obj2DqeMap (Object To DelayQueueElement Map) (0 objects sorted by dequeue time)
06.02.2017 13:51:46   Traveler: ########## Connection Notification Sender APNS (Mon Feb 06 13:51:46 CET 2017) ##########
06.02.2017 13:51:46   Traveler: Description: Details about the connections to the Apple Push Notification Service (APNS) servers.
06.02.2017 13:51:46   Traveler: No connection for To Do Development to gateway.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_TODO_DEVELOPMENT
06.02.2017 13:51:46   Traveler: No connection for To Do Development Sandbox to gateway.sandbox.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_TODO_DEVELOPMENT_SANDBOX
06.02.2017 13:51:46   Traveler: No connection for To Do Production to gateway.push.apple.com on port 2195, but it is enabled via NTS_PUSH_ENABLE_APNS_APPLE_TODO_PRODUCTION
06.02.2017 13:51:46   Traveler: No connection for To Do Production Sandbox to gateway.sandbox.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_TODO_PRODUCTION_SANDBOX
06.02.2017 13:51:46   Traveler: No connection for Verse for Citrix Development to gateway.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_VERSE_CITRIX_DEVELOPMENT
06.02.2017 13:51:46   Traveler: No connection for Verse for Citrix Development Sandbox to gateway.sandbox.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_VERSE_CITRIX_DEVELOPMENT_SANDBOX
06.02.2017 13:51:46   Traveler: No connection for Verse for Citrix Production to gateway.push.apple.com on port 2195, but it is enabled via NTS_PUSH_ENABLE_APNS_APPLE_VERSE_CITRIX_PRODUCTION
06.02.2017 13:51:46   Traveler: No connection for Verse for Citrix Production Sandbox to gateway.sandbox.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_VERSE_CITRIX_PRODUCTION_SANDBOX
06.02.2017 13:51:46   Traveler: No connection for Verse Development to gateway.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_VERSE_IBM_DEVELOPMENT
06.02.2017 13:51:46   Traveler: No connection for Verse Development Sandbox to gateway.sandbox.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_VERSE_IBM_DEVELOPMENT_SANDBOX
06.02.2017 13:51:46   Traveler: No connection for Verse Production to gateway.push.apple.com on port 2195, but it is enabled via NTS_PUSH_ENABLE_APNS_APPLE_VERSE_IBM_PRODUCTION

06.02.2017 13:51:46   Traveler: No connection for Verse Production Sandbox to gateway.sandbox.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_APPLE_VERSE_IBM_PRODUCTION_SANDBOX
06.02.2017 13:51:46   Traveler: No connection for MaaS360 Development to gateway.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_MAAS360_DEVELOPMENT
06.02.2017 13:51:46   Traveler: No connection for MaaS360 Production to gateway.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_MAAS360_PRODUCTION
06.02.2017 13:51:46   Traveler: No connection for Third Party Development to gateway.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_THIRD_PARTY_DEVELOPMENT
06.02.2017 13:51:46   Traveler: No connection for Third Party Production to gateway.push.apple.com on port 2195 because it is disabled via NTS_PUSH_ENABLE_APNS_THIRD_PARTY_PRODUCTION
06.02.2017 13:51:46   Traveler: -- Certificate Validity Dates (Mon Feb 06 13:51:46 CET 2017) --
06.02.2017 13:51:48   Traveler: D:\Programs\Domino\data\traveler\cfg\PushAPNSAppleToDoProduction.p12 is valid from Wed Jul 13 15:10:31 CEST 2016 to Sat Aug 12 15:10:31 CEST 2017.
06.02.2017 13:51:49   Traveler: D:\Programs\Domino\data\traveler\cfg\PushAPNSAppleVerseCitrixProduction.p12 is valid from Wed Jul 13 15:25:41 CEST 2016 to Sat Aug 12 15:25:41 CEST 2017.
06.02.2017 13:51:50   Traveler: D:\Programs\Domino\data\traveler\cfg\PushAPNSAppleVerseIBMProduction.p12 is valid from Wed Jul 13 15:17:45 CEST 2016 to Sat Aug 12 15:17:45 CEST 2017.

06.02.2017 13:51:50   Traveler: -- APNS-DelQ --

...


Kommentare

1Andreas Preiß  06.02.2017 23:16:04  Old IBM Apple APNS Push Certificate used for Verse expired on Friday 03.02.17

HI Detlev,

thank's a lot for your information.

Just a little correction.

Your command includes one blank ..

Please correct the command

tell traveler push cmstatus

your the shown console includes the correct command without the blank.

Thanks a lot

Andreas

2Stuart  01.03.2017 18:58:39  Old IBM Apple APNS Push Certificate used for Verse expired on Friday 03.02.17

Thanks - very helpful!

  •  
  • Hinweis zum Datenschutz und Datennutzung:
    Bitte lesen Sie unseren Hinweis zum Datenschutz bevor Sie hier einen Kommentar erstellen.
    Zur Erstellung eines Kommentar werden folgende Daten benötigt:
    - Name
    - Mailadresse
    Der Name kann auch ein Nickname/Pseudonym sein und wird hier auf diesem Blog zu Ihrem Kommentar angezeigt. Die Email-Adresse dient im Fall einer inhaltlichen Unklarheit Ihres Kommentars für persönliche Rückfragen durch mich, Detlev Pöttgen.
    Sowohl Ihr Name als auch Ihre Mailadresse werden nicht für andere Zwecke (Stichwort: Werbung) verwendet und auch nicht an Dritte übermittelt.
    Ihr Kommentar inkl. Ihrer übermittelten Kontaktdaten kann jederzeit auf Ihren Wunsch hin wieder gelöscht werden. Senden Sie in diesem Fall bitte eine Mail an blog(a)poettgen(punkt)eu

  • Note on data protection and data usage:
    Please read our Notes on Data Protection before posting a comment here.
    The following data is required to create a comment:
    - Name
    - Mail address
    The name can also be a nickname/pseudonym and will be displayed here on this blog with your comment. The email address will be used for personal questions by me, Detlev Pöttgen, in the event that the content of your comment is unclear.
    Neither your name nor your e-mail address will be used for any other purposes (like advertising) and will not be passed on to third parties.
    Your comment including your transmitted contact data can be deleted at any time on your request. In this case please send an email to blog(a)poettgen(dot)eu

Archive