IV38474: IBM SECURITY CODE IGNORING BLACKLISTED CERTIFICATES

APAR status

• Closed as program error.

Error description

• Error Message: The CertPath security component is not checking
  certificates against the "blacklisted certificates" within the
  class UntrustedCertificates.java.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The CertPath security component is not checking certificates
  against the "blacklisted certificates" within the class
  UntrustedCertificates.java.
  

Problem conclusion

• This defect will be fixed in:
  6.0.1 SR6
  6.0.0 SR14
  5.0.0 SR17
  1.4.2 SR14
  .
  The CertPath component could not add this support until the
  UntrustedCertificates class had been added to the
  Java 1.4.2, 5.0, 626, and 6.0 releases.  This class is not owned
  by the CertPath security component.
  Now that the UntrustedCertificates class has been added to those
  Java releases, the logic to check those certificates has been
  added to CertPath.
  This logic has previously been added to the 7.0 release.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IV38473

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSY

     UP