IV42980: IBMPKCS11IMPL PROVIDER THROWS NOSUCHALGORITHMEXCEPTION

APAR status

• Closed as program error.

Error description

• Error Message: The IBMPKCS11Impl provider supports an RSA cipher
  only if the underlying crypto hardware supports the mechanism
  CKM_RSA_X_509.  In other words, if the underlying crypto
  hardware supports the crypto mechanism CKM_RSA_PKCS, but not
  CKM_RSA_X_509, then the IBMPKCS11Impl provider will not be able
  to support an RSA cipher and will throw a
  NoSuchAlgorithmException for any attempt to use one.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The IBMPKCS11Impl provider supports an RSA cipher only if the
  underlying crypto hardware supports the mechanism CKM_RSA_X_509.
   In other words, if the underlying crypto hardware supports the
  crypto mechanism CKM_RSA_PKCS, but not CKM_RSA_X_509, then the
  IBMPKCS11Impl provider will not be able to support an RSA cipher
  and will throw a NoSuchAlgorithmException for any attempt to use
  one.
  

Problem conclusion

• This defect will be fixed in:
  5.0.0 SR16 FP3
  6.0.0 SR14
  6.0.1 SR6
  7.0.0 SR5
  .
  The IBMPKCS11Impl provider has been modified to enable it to
  support an RSA cipher if "either" the CKM_RSA_X_509 or
  CKM_RSA_PKCS crypto mechanism is supported by the underlying
  crypto hardware.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IV42981

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSY

     UP