IBM Support

IV64658: IKEYMAN CRASHES WHEN DEALING WITH A BAD CERTIFICATE

Fixes are available

PI28439: Ship JAVA apar IV66110 for WAS V70035 using Java 6
PI37014: SHIP JAVA 6 SR16 FP1 + IV64658+IV64659+IV70681 FOR WAS 70035

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: The following UnsupportedOperationException
exception is received:

Stack Trace:

java.lang.UnsupportedOperationException: toKeyStoreEntry() -
soaprecipientat
com.ibm.gsk.ikeyman.keystore.entry.UnloadableCertificateItemImpl
.getSubjectDN(UnloadableCertificateItemImpl.java:58)at
com.ibm.gsk.ikeyman.keystore.entry.EntryFactory.findLowestCert(E
ntryFactory.java:499)at
com.ibm.gsk.ikeyman.keystore.entry.EntryFactory.extractCertChain
(EntryFactory.java:460)at
com.ibm.gsk.ikeyman.command.CommandFactory.validateCertChain(Com
mandFactory.java:2587)at
com.ibm.gsk.ikeyman.command.CommandFactory.access$700(CommandFac
tory.java:116)at
com.ibm.gsk.ikeyman.command.CommandFactory$LoadDbCommand.run(Com
mandFactory.java:626)at
com.ibm.gsk.ikeyman.command.Command.invoke(Command.java:203)at
com.ibm.gsk.ikeyman.command.gui.KeymanController$Invoker.invoke(
KeymanController.java:266)at
com.ibm.gsk.ikeyman.command.gui.KeymanController.actionPerformed
(KeymanController.java:99)at
com.ibm.gsk.ikeyman.gui.KeymanFrame$KeymanAction.actionPerformed
(KeymanFrame.java:753)at
...

Local fix

  • 



Problem summary


    

  • This was caused by the new validation feature. It treated this
bad certificate as normal which it should not.

    



Problem conclusion


    

  • iKeyman has been upgrade to version 8.0.399.
.
This APAR will be fixed in the following Java Releases:
   6    SR16 FP2  (6.0.16.2)
   7    SR8       (7.0.8.0)
   6 R1 SR8 FP2   (6.1.8.2)
   7 R1 SR2       (7.1.2.0)
.
Contact your IBM Product's Service Team for these Service
Refreshes and Fix Packs.
For those running stand-alone, Java maintenance is available
from:
           https://www.ibm.com/developerworks/java/jdk/

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IV64658
    • 

  • Reported component name
    SECURITY
    • 

  • Reported component ID
    620700125
    • 

  • Reported release
    600
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2014-09-05
    • 

  • Closed date
    2014-09-08
    • 

  • Last modified date
    2014-09-08
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    SECURITY
    • 

  • Fixed component ID
    620700125
    • 



Applicable component levels


    

  • R600  PSY
       UP
    • 

  • R260  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            07 December 2020
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback