PH67763: MEMORY GROWTH IN XDH KEY AGREEMENT AND CIPHER INITIALIZATION

APAR status

• Closed as program error.

Error description

• Error Message: Users of Java Semeru may encounter memory growth
  when using TLS connections.
  The memory growth may be observed when using XDH key agreement
  or in the symmetric cipher initialization.
  .
  Stack Trace: N/A
  .
  When running a TLS connection over a long period of time, the
  Java heap storage shows a constant growth that may end up in an
  OutOfMemoryError.
  

Local fix

• XDH curves can be disabled to reduce the memory growth.
  To disable XDH curves, update the jdk.disabled.namedCurves
  security property in java.security file to include the XDH
  curves, x25519, and x448.
  

Problem summary

• Users of Java Semeru may encounter memory growth when using TLS
  connections.
  The memory growth may be observed when using XDH key agreement
  or in the symmetric cipher initialization.
  

Problem conclusion

• The proper clean-up and initialization were added to the
  OpenJCEPlus native layer to avoid memory growth.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
   21 21.0.8.0
   17 17.0.16.0
   11 11.0.28.0
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
   - Java SDK Products on z/OS
   https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels