IV35788: HWKEYTOOL CANNOT IMPORT CERTIFICATE REPLY INTO PKCS#11 KEY STORE

APAR status

• Closed as program error.

Error description

• Error Message: Using hwkeytool to import a certificate reply
  from a certificate authority into a PKCS#11 key store:
  hwkeytool -importcert -alias myalias -file reply.cer -keystore
  NONE -storetype PKCS11
  Results in the following error message:
  hwkeytool error (likely untranslated):
  java.lang.ClassCastException: <OSB>Ljava.lang.Object;
  incompatible with <OSB>Ljava.security.cert.Certificate;
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The problem is caused when using hwkeytool to import a
  certificate reply from a certificate authority into a PKCS#11
  key store.
  

Problem conclusion

• This defect will be fixed in:
  7.0.0 SR4
  .
  The hwkeytool utility has been updated such that the import of a
  certificate reply into a PKCS#11 key store no longer results in
  an error.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R260 PSY

     UP