IZ77006: IBM KEYTOOL COMMAND FAILS TO LIST KEYSTORE CONTENTS

APAR status

• Closed as program error.

Error description

• Error Message: Running the IBM keytool command from JDKs 1.4.2,
  5.0, or 6.0 with a pkcs12 keystore file that contains only
  certificate entries, results in the following error:
  keytool -list -v -keystore storetrust.p12 -storetype PKCS12
  -storepass thepassword
  keytool error (likely untranslated): java.io.IOException: Error
  in loading the keystore: null
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Running the IBM keytool command from JDKs 1.4.2, 5.0, or 6.0
  with a pkcs12 keystore file that contains only certificate
  entries, results in the following error:
  keytool -list -v -keystore storetrust.p12 -storetype PKCS12
  -storepass thepassword
  keytool error (likely untranslated): java.io.IOException: Error
  in loading the keystore: null
  

Problem conclusion

• This defect will be fixed in:
  1.4.2 SR14
  5.0.0 SR12
  6.0.0 SR9
  .
  The PKCS SafeContents.getSafeBags( ) method was modified to
  detect when the SafeBag array is null and to return an empty
  SafeBag array instead.  PKCS callers of this method are prepared
  to handle an empty SafeBag array.
  .
  To obtain the fix:
  Install build 20100606 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM16096

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSN

     UP