IBM Support

IV02336: THE ORDER OF PROVIDER LIST IS NOT FOLLOWED AFTER CALLING SECURIT Y.INSERTPROVIDERAT(PROVIDER, POS)

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: This scenario can be expanded to other providers
    which provides same algorithm.
    In this scenario, a java.security file that has IBMJCECCA
    provider on top of IBMJCE provider in the provider order list.
    The the test case calls
    java.security.Security.insertProviderAt() method to insert
    IBMJCE provider
    to the position 1 of the provider order list.  Then it call md =
    MessageDigest.getInstance(algorithm); should use the provider
    that is inserted
    to create a messageDigest with default provider (should be the
    one on the top of the provider list,
    which is IBMJCE).  A subsequent call to md.getProvider() should
    return IBMJCE as provider name.
    However, it returned IBMJCECCA as provider name that was
    originally on top of the provider order
    list.
    .
    Stack Trace: N/A
    .
    

Local fix

Problem summary

  • The problem is caused when two providers provides same
    algorithm.
    

Problem conclusion

  • This defect will be fixed in:
    6.0.0 SR9 FP2
    .
    The implementation has been updated to ensure the order of the
    providers.
    .
    To obtain the fix:
    Install build 20110129 or later
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV02336

  • Reported component name

    JAVA CLASS LIBS

  • Reported component ID

    620700130

  • Reported release

    600

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2011-06-28

  • Closed date

    2011-06-29

  • Last modified date

    2011-07-09

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    JAVA CLASS LIBS

  • Fixed component ID

    620700130

Applicable component levels

  • R600 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCVQ3Y","label":"Java Class Libraries"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
09 July 2011