IV94625: IKEYMAN/IBMJCE GENERATED ECC KEYS DO NOT WORK WITH GSKIT

APAR status

• Closed as program error.

Error description

• Error Message: GSKit cannot decode EC private keys generated by
  ikeyman or IBMJCE.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The problem is caused when creating ECC keys with ikeyman or
  IBMJCE and then using them with GSKit.
  

Problem conclusion

• The associated Hursley RTC Problem Report is 125818
  The associated Austin CMVC defect is 117618
  The associated Austin APAR is IV94384
  JVMs affected: Java 6.0, Java 626, Java 7.0, Java 727 and Java 8
  The fix was delivered for Java 6.0 SR16FP45, Java 626 SR8FP45,
  Java 7.0 SR10FP5, Java 727 SR4FP5, and Java 8 SR4FP5
  The affected jar is "ibmjceprovider.jar".
  The build level of this jar for the affected releases is
  20170327.
  .
  This APAR will be fixed in the following Java Releases:
   8 SR4 FP5 (8.0.4.5)
   7 R1 SR4 FP5 (7.1.4.5)
   6 R1 SR8 FP45 (6.1.8.45)
   6 SR16 FP45 (6.0.16.45)
   7 SR10 FP5 (7.0.10.5)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R270 PSY

     UP

• R260 PSY

     UP

• R600 PSY

     UP