APAR status
Closed as program error.
Error description
Component: IBM JCE - KEYTOOL KeyTool -storepasswd does not change a password less than 6 characters successfully - it produces an exception with the message: given final block not properly padded. It also results in data-loss, since the keystore is zeroed-out. JVMs affected: 1.4.2, 5.0, 6.0 JARs affected: IBMJCEPROVIDER.JAR
Local fix
Level 3 to update Workaround: Use ikeyman
Problem summary
Attempting to change a keystore password for a PKCS12 KeyStore file fails if the password is less than the minimum number of characters (6). It also wipes the KeyStore.
Problem conclusion
PKCS12KeyStore was fixed to refuse attempts to change the storepassword and/or keypasswords to match Sun's behavior. The fix will be available in 6.0 SR 3 and 1.5.0 SR 9. It will be available in 1.4.2 SR 12 if one is created. The fix is for ibmjceprovider.jar on 080728.
Temporary fix
Use ikeyman instead
Comments
APAR Information
APAR number
IZ23423
Reported component name
TIV JAVA CRYPTO
Reported component ID
TIVSECJCE
Reported release
100
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2008-05-30
Closed date
2008-08-12
Last modified date
2008-08-12
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
TIV JAVA CRYPTO
Fixed component ID
TIVSECJCE
Applicable component levels
R100 PSN
UP
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCZL42","label":"JCE"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"100","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
12 August 2008