IZ68781: DISABLED MECHANISMS FROM THE PKCS11IMPL CONFIG FILE ARE NOT PROC ESSED CORRECTLY

APAR status

• Closed as program error.

Error description

• Error Message: This problem was discovered internally.
  It was not reported by a customer.
  The scenario is that the PKCS11 mechanism
  CKM_RSA_PKCS_KEY_PAIR_GEN was disabled by the user within
  his PKCS11Impl config file.  The user's test case created an RSA
  KeyPairGenerator instance and successfully generated an RSA key
  pair.  An exception should have been thrown since the mechanism
  had been disabled.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The scenario is that the PKCS11 mechanism
  CKM_RSA_PKCS_KEY_PAIR_GEN was disabled by the user within
  his PKCS11Impl config file.  The user's test case created an RSA
  KeyPairGenerator instance and successfully generated an RSA key
  pair.  An exception should have been thrown since the mechanism
  had been disabled.
  

Problem conclusion

• This defect will be fixed in:
  5.0.0 SR11 FP2
  6.0.0 SR8
  .
  A fix for this problem has been applied to ibmpkcs1impl.jar.
  .
  To obtain the fix:
  Install build 20100205 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IZ68786

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSN

     UP