IBM Support

PM62842: WEB SERVICES SECURITY RUNTIME UPDATE TO SUPPORT SHA-2 SIGNATURE ALGORITHMS.

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Web Services security runtime supports only SHA-1 signature
    algorithms such as RSA-SHA1 and HMAC-SHA1.
    New recommendations from NIST (Special Publication 800-131A)
    indicate that SHA1 has weaknesses and implementations shall
    move to SHA-2 for digital signatures.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server who uses web services security to    *
    *                  secure messages.                            *
    ****************************************************************
    * PROBLEM DESCRIPTION: Web Services security runtime does not  *
    *                      have support to use SHA-2 digital       *
    *                      signature algorithms to produce         *
    *                      digital signatures.                     *
    ****************************************************************
    * RECOMMENDATION:  Install fixpacks that have this APAR.       *
    ****************************************************************
    Web Services security runtime only supports SHA-1 signature
    algorithms (such as RSA-SHA1 and HMAC-SHA1) to produce digital
    signatures. New recommendation from NIST indicate that
    SHA-1 has weakness and implementations shall move to SHA-2 for
    digital signatures.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PM62842

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2012-04-19

  • Closed date

    2012-07-11

  • Last modified date

    2016-03-22

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE APP S

  • Fixed component ID

    5724J0800

Applicable component levels

  • R700 PSY

       UP

  • R800 PSY

       UP

  • R850 PSY

       UP



Document information

More support for: WebSphere Application Server
General

Software version: 7.0

Reference #: PM62842

Modified date: 22 March 2016


Translate this page: