IT22676: THE GATEWAYSCRIPT SIGN() API THAT USES SHA1 AND AN RSA KEY LENGTH OF 1024 INCORRECTLY RETURNS ERROR "INCORRECT KEY LENGTH"

Fix packs for DataPower Gateway version 7.2
Fix packs for DataPower Gateway version 7.5
Fix packs for DataPower Gateway version 7.5.1
Fix packs for DataPower Gateway version 7.5.2
Fix packs for DataPower Gateway version 7.6

APAR status

• Closed as program error.

Error description

• When using the Sha1 algorithm in a gatewayscript it return
  error "Key length should be 1280 bits"
  If you use DataPower to sign messages using legacy 1024 private
  keys you get this error: "When using the 'sha1' algorithm, the
  key length shall be 1280 bits" .
  

Local fix

• The XSLT extension function dp:sign(...) is not affected -
  different code path.
  You can replace the Gatewayscript with XSLT.
  

Problem summary

• The gatewayscript sign() api that uses sha1 and an rsa key
  length of 1024 incorrectly returns an error about incorrect key
  length.
  

Problem conclusion

• Fix is available in 7.2.0.18, 7.5.0.12, 7.5.1.11, 7.5.2.11 and
  7.6.0.4.
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R720 PSY

     UP

• R750 PSY

     UP

• R751 PSY

     UP

• R752 PSY

     UP

• R760 PSY

     UP