IZ80960: UPDATE VERISIGN ROOT CERTIFICATES

APAR status

• Closed as program error.

Error description

• Error Message: This is not a customer reported defect.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• This is an update to the Verisign root certificates. This is
  periodically announced by Sun/Oracle, and we apply the same
  update to maintain compatibility.
  

Problem conclusion

• This defect will be fixed in:
  5.0.0 SR12
  .
  Updated the keystore (cacerts) to reflect the changes by
  Verisign.
  Added the following:
  verisignuniversalrootca
  verisignclass3g5ca
  thawteprimaryrootca
  geotrustprimaryca
  geotrustprimarycag3
  thawteprimaryrootcag3
  geotrustuniversalca
  Removed the following:
  thawtepersonalbasicca
  thawtepersonalpremiumca
  verisignclass2ca
  Following certificates replaced by others to provide stronger
  encryption (SHA based instead of MD5, they have not been
  removed, however):
  thawtepersonalfreemailca
  thawtepremiumserverca
  thawteserverca
  verisignclass1ca
  verisignclass3ca
  .
  To obtain the fix:
  Install build 20100117 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA 5 SECURITY

• Fixed component ID

  620500125

Applicable component levels

• R500 PSN

     UP