IBM Support

IV35788: HWKEYTOOL CANNOT IMPORT CERTIFICATE REPLY INTO PKCS#11 KEY STORE

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Error Message: Using hwkeytool to import a certificate reply
    from a certificate authority into a PKCS#11 key store:
    hwkeytool -importcert -alias myalias -file reply.cer -keystore
    NONE -storetype PKCS11
    Results in the following error message:
    hwkeytool error (likely untranslated):
    java.lang.ClassCastException: <OSB>Ljava.lang.Object;
    incompatible with <OSB>Ljava.security.cert.Certificate;
    .
    Stack Trace: N/A
    .
    

Local fix

Problem summary

  • The problem is caused when using hwkeytool to import a
    certificate reply from a certificate authority into a PKCS#11
    key store.
    

Problem conclusion

  • This defect will be fixed in:
    7.0.0 SR4
    .
    The hwkeytool utility has been updated such that the import of a
    certificate reply into a PKCS#11 key store no longer results in
    an error.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV35788

  • Reported component name

    SECURITY

  • Reported component ID

    620700125

  • Reported release

    260

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-01-23

  • Closed date

    2013-01-23

  • Last modified date

    2013-01-23

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    SECURITY

  • Fixed component ID

    620700125

Applicable component levels

  • R260 PSY

       UP



Document information

More support for: Runtimes for Java Technology
Security

Software version: 260

Reference #: IV35788

Modified date: 23 January 2013