IV54575: INCORRECT OIDS WAS USED FOR AESWRAP CIPHER

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  The AESWrap cipher OIDs used in IBMJCE are missing a .1
  qualifier:
  -----------------------
  2.16.840.1.101.3.4.5
  2.16.840.1.101.3.4.8
  2.16.840.1.101.3.4.25
  2.16.840.1.101.3.4.28
  2.16.840.1.101.3.4.45
  2.16.840.1.101.3.4.48
  -----------------------
  The correct OID's are:
  -----------------------
  2.16.840.1.101.3.4.1.5
  2.16.840.1.101.3.4.1.8
  2.16.840.1.101.3.4.1.25
  2.16.840.1.101.3.4.1.28
  2.16.840.1.101.3.4.1.45
  2.16.840.1.101.3.4.1.48
  -----------------------
  

Local fix

• Use "AESWrap" as the service name to access the AESWrap cipher
  in IBMJCE.
  

Problem summary

• The AESWrap cipher OIDs used in IBMJCE are missing a .1
  qualifier
  

Problem conclusion

• This APAR will be fixed in the following Java Releases:
     7    SR7       (7.0.7.0)
     6 R1 SR8       (6.1.8.0)
     7 R1 SR1       (7.1.1.0)
     5.0  SR16 FP6  (5.0.16.6)
     6    SR16      (6.0.16.0)
  .
  A fix is made to IBMJCE provider to use the correct OIDs for
  AESWrap cipherThe associated Hursley CMVC defect is 201887The
  associated Austin CMVC defect is 115209The associated Austin
  APAR is IV54192JVMs affected: Java 5.0, Java 6.0, Java 626, Java
  7.0 and Java 727The fix was delivered for Java 5.0 SR16FP6, Java
  6.0 SR15FP2, Java 626 SR8, Java 7.0 SR7 and Java 727 SR1The
  affected jar is "ibmjceprovider.jar".The build level of this jar
  for the affected releases is "20140124"
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IV54573

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSY

     UP