IZ90717: PROVIDER ORDER NOT HONORED IN JAVA.SECURITY

APAR status

• Closed as program error.

Error description

• The provider order in java.security is not honored. This can
  cause problems, specifically with Hardware Crypto.
  
  After installing FP15 the Hardware Crypto doesn't work even
  though it was configured and working previously on previus
  levels.
  
  With tracing enabled you will see the PreMasterSecret is using
  IBMJCE Provider instead of the IBMPKCS11Impl-HWCrypto version
  1.6.
  
  Working:
  PreMasterSecret: Using cipher for unwrap RSA/SSL/PKCS1Padding
  from provider from init IBMPKCS11Impl-HWCrypto version 1.6
  
  Non-working:
  PreMasterSecret: Using cipher for unwrap RSA/SSL/PKCS1Padding
  from provider from init IBMJCE version 1.2
  

Local fix

Problem summary

• The problem is casued when a new added provider provides same
  algorithm with the default ones.
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR9 FP2
  .
  The harmony code has been updated to deal with the order of
  these providers.
  .
  To obtain the fix:
  Install build 20110120 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM38883

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels

• R600 PSN

     UP