IV03288: AVA.JAVA FAILS PROCESSING ESCAPED CHARS WITHIN ATTRIBUTE VALUES

APAR status

• Closed as program error.

Error description

• Error Message: Unable to open cacerts file using ikeyman.  It
  fails on the certificate with the alias entrustevca with the
  following error:
  The key for label 'entrustevca' could not be recovered.
  Error Code:
  112
  Stack Trace:
  com.ibm.gsk.ikeyman.error.KeyManagerException:
  com.ibm.gsk.ikeyman.error.KeyManagerException:
  java.io.IOException: Incorrect AVA format
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$BasicKeyStoreBag.ma
  keEntry(EntryBagFactory.java:540)
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$AbstractKeyStoreBag
  .getItem(EntryBagFactory.java:387)
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$CompoundEntryBag.ge
  tItem(EntryBagFactory.java:691)
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$AbstractEntryContai
  nerBag.getItem(EntryBagFactory.java:196)
   at
  com.ibm.gsk.ikeyman.keystore.EntryInterfaceFactory$CompoundEntry
  Interface.getItem(EntryInterfaceFactory.java:360)
   at
  com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory$KeyStoreItemImp
  l.getEntries(KeyStoreItemFactory.java:731)
   at
  com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory$KeyStoreItemImp
  l.getCertificates(KeyStoreItemFactory.java:772)
   at
  com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory$KeyStoreItemImp
  l.getInfo(KeyStoreItemFactory.java:787)
   at
  com.ibm.gsk.ikeyman.command.Command.fireKeyManagerEventDatabaseO
  pened(Command.java:125)
   at
  com.ibm.gsk.ikeyman.command.CommandFactory$LoadDbCommand.run(Com
  mandFactory.java:533)
   at com.ibm.gsk.ikeyman.command.Command.invoke(Command.java:201)
   at
  com.ibm.gsk.ikeyman.command.gui.KeymanController$Invoker.invoke(
  KeymanController.java:261)
   at
  com.ibm.gsk.ikeyman.command.gui.KeymanController.actionPerformed
  (KeymanController.java:94)
   at
  com.ibm.gsk.ikeyman.gui.KeymanFrame$KeymanAction.actionPerformed
  (KeymanFrame.java:741)
   at
  javax.swing.AbstractButton.fireActionPerformed(AbstractButton.ja
  va:2018)
   at
  javax.swing.AbstractButton$Handler.actionPerformed(AbstractButto
  n.java:2341)
   at
  javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButton
  Model.java:402)
   at
  javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.jav
  a:259)
   at
  javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicBu
  ttonListener.java:252)
   at
  java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.j
  ava:289)
   at java.awt.Component.processMouseEvent(Component.java:6437)
   at
  javax.swing.JComponent.processMouseEvent(JComponent.java:3321)
   at java.awt.Component.processEvent(Component.java:6202)
   at java.awt.Container.processEvent(Container.java:2213)
   at java.awt.Component.dispatchEventImpl(Component.java:4793)
   at java.awt.Container.dispatchEventImpl(Container.java:2271)
   at java.awt.Component.dispatchEvent(Component.java:4619)
   at
  java.awt.LightweightDispatcher.retargetMouseEvent(Container.java
  :4816)
   at
  java.awt.LightweightDispatcher.processMouseEvent(Container.java:
  4476)
   at
  java.awt.LightweightDispatcher.dispatchEvent(Container.java:4406
  )
   at java.awt.Container.dispatchEventImpl(Container.java:2257)
   at java.awt.Window.dispatchEventImpl(Window.java:2677)
   at java.awt.Component.dispatchEvent(Component.java:4619)
   at java.awt.EventQueue.dispatchEvent(EventQueue.java:662)
   at
  java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatc
  hThread.java:211)
   at
  java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchTh
  read.java:128)
   at
  java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatc
  hThread.java:117)
   at
  java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java
  :113)
   at
  java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java
  :105)
   at
  java.awt.EventDispatchThread.run(EventDispatchThread.java:90)
  Caused by: com.ibm.gsk.ikeyman.error.KeyManagerException:
  java.io.IOException: Incorrect AVA format
   at
  com.ibm.gsk.ikeyman.keystore.entry.DisplayItemFactory$DNItemImpl
  .<init>(DisplayItemFactory.java:513)
   at
  com.ibm.gsk.ikeyman.keystore.entry.DisplayItemFactory$DNItemImpl
  .<init>(DisplayItemFactory.java:444)
   at
  com.ibm.gsk.ikeyman.keystore.entry.DisplayItemFactory.getDNItem(
  DisplayItemFactory.java:149)
   at
  com.ibm.gsk.ikeyman.keystore.entry.CertificateItemImpl.populateD
  ata(CertificateItemImpl.java:73)
   at
  com.ibm.gsk.ikeyman.keystore.entry.CertificateItemImpl.<init>(Ce
  rtificateItemImpl.java:55)
   at
  com.ibm.gsk.ikeyman.keystore.entry.EntryFactory.newCertificateIt
  em(EntryFactory.java:116)
   at
  com.ibm.gsk.ikeyman.keystore.EntryMakerFactory$CertMaker.makeEnt
  ry(EntryMakerFactory.java:172)
   at
  com.ibm.gsk.ikeyman.keystore.EntryMakerFactory$CertMaker.makeEnt
  ry(EntryMakerFactory.java:156)
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$BasicKeyStoreBag.ma
  keEntry(EntryBagFactory.java:481)
   ... 39 more
  Caused by: java.io.IOException: Incorrect AVA format
   at com.ibm.security.x509.AVA.readChar(AVA.java:1003)
   at com.ibm.security.x509.AVA.<init>(AVA.java:236)
   at com.ibm.security.x509.AVA.<init>(AVA.java:185)
   at com.ibm.security.x509.RDN.<init>(RDN.java:142)
   at com.ibm.security.x509.X500Name.parseDN(X500Name.java:1126)
   at com.ibm.security.x509.X500Name.<init>(X500Name.java:166)
   at com.ibm.security.x509.X500Name.<init>(X500Name.java:148)
   at
  com.ibm.gsk.ikeyman.keystore.entry.DisplayItemFactory$DNItemImpl
  .<init>(DisplayItemFactory.java:509)
   ... 47 more
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• A problem was discovered within the AVA.java class in logic
  which parses escaped characters within the value of
  a distinguished name attribute.
  

Problem conclusion

• This defect will be fixed in:
  1.4.2 SR14
  5.0.0 SR12
  6.0.0 SR10
  .
  A problem was discovered within the AVA.java class in logic
  which parses escaped characters within the value of
  a distinguished name attribute.
  .
  To obtain the fix:
  Install build 20110519 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM43950

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSY

     UP