IJ00442: UPDATE JSSE TO SUPPORT IBMJCEPLUS/IBMJCEPLUSFIPS

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Update IBMJSSE2 provider to support the IBMJCEPlus and
  IBMJCEPlusFIPS provider.
  System property added to enable JSSE to run in FIPS mode using
  the IBMJCEPlusFIPS provider.
  Using the IBMJCEFIPS provider:
  1) Make sure that the IBMJCEFIPS provider is in the provider
  list
  2) Set the following system properties:
  -Dcom.ibm.jsse2.usefipsprovider=true
  -Dcom.ibm.jsse2.usefipsProviderName=IBMJCEFIPS (optional)
  default is IBMJCEFIPS
  Using the IBMJCEPlusFIPS provider:
  1) Make sure that the IBMJCEPlusFIPS provider is in the provider
  list
  2) Set the following system properties:
  -Dcom.ibm.jsse2.usefipsprovider=true
  -Dcom.ibm.jsse2.usefipsProviderName=IBMJCEPlusFIPS
  In addition, the default secure random implementation has been
  updated from IBMSecureRandom to SHA2DBG.
  

Problem conclusion

• Build date 20170927 Austin CMVC defect 117708 RTC 135163
  .
  This APAR will be fixed in the following Java Releases:
   8 SR5 FP5 (8.0.5.5)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R270 PSY

     UP