IJ32593: ADD AKI TO NON SELF-SIGNED CERTIFICATES AND SUPPORT FOR MULTIPLE SAN VALUES IN CERTS

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Add Authority Key Identifier to non self-signed certificates and
  support for multiple Subject Alternative Name values in
  certificates generated by Key Certificate Management
  

Problem conclusion

• Code was modified to add the Authority Key Identifier (AKI)
  extension when generating non self-signed certificates. Support
  was added to allow multiple Subject Alternative Values (SAN)
  A fix was provided to ibmkeycert.jar
  The associated Hursley PR is 145253
  The Austin git issue is IBMKCM #1
  JVMs affected Java 7.0, 7.1, 8.0
  
  .
  This APAR will be fixed in the following Java Releases:
   8 SR6 FP35 (8.0.6.35)
   7 SR10 FP90 (7.0.10.90)
   7 R1 SR4 FP90 (7.1.4.90)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels