IJ53195: ENTRUST ROOT CERTIFICATES NOT TRUSTED AFTER 11TH NOVEMBER 2024.

APAR status

• Closed as program error.

Error description

• Error Message: (Entrust) root certificate not trusted.
  .
  Stack Trace: N/A
  .
  

Local fix

• See
  https://ibmdocs-test.dcs.ibm.com/docs/en/SSYKE2_8.0.0_test?topic
  =wn-service-refresh-8#security_whatsnew_sr8__fp35__title__1
  

Problem summary

• TLS server certificates anchored by Entrust root certificates
  and created after 11 November 2024 are not trusted.
  

Problem conclusion

• The relevant certificates are trusted by using the workaround.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
   21 21.0.6.0
   17 17.0.14.0
   11 11.0.26.0
  IBM SDK, Java Technology Edition
   8 SR8 FP40 (8.0.8.40)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
   - IBM Semeru Runtimes, Version 11 and later
   https://www.ibm.com/semeru-runtimes/downloads/
   - IBM SDK, Java Technology Edition, Version 8
   https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
   - Java SDK Products on z/OS
   https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IJ53197

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels