IV95074: RELAX DER PARSER CHECKS

APAR status

• Closed as program error.

Error description

• Error Message: An error message is reported when using
  certificates that contain DER encodings which are not encoded in
  the shortest form possible.  The following error message is
  reported:
  An IO Exception has occurred:
  java.io.IOException: Invalid encoding: redundant leading 0s
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• An error message is reported when using certificates that
  contain DER encodings which are not encoded in the shortest form
  possible
  

Problem conclusion

• The JVM has been updated to relax some aspects of the DER
  validation.
  The associated Hursley RTC Problem Report is 126869
  The associated Austin CMVC defect is 117623
  JVMs affected: Java 8.0.4.5, Java 7.1.4.5, Java 7.0.10.5, Java
  6.1.8.45, Java 6.0.16.45
  The affected jars are "ibmpkcs.jar" and "ibmjceprovider.jar"
  The build level of these jars jar for the affected releases is
  "20170411"
  .
  This APAR will be fixed in the following Java Releases:
     8    SR4 FP5   (8.0.4.5)
     6    SR16 FP45 (6.0.16.45)
     6 R1 SR8 FP45  (6.1.8.45)
     7 R1 SR4 FP5   (7.1.4.5)
     7    SR10 FP5  (7.0.10.5)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R270 PSY

     UP

• R600 PSY

     UP

• R260 PSY

     UP