PH69709: IBMJCEHYBRID DOES NOT FAILOVER BECAUSE SIGNATURE EXCEEDS BLOCK SIZE OF 32768

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: IBMJCEHybridException: Object state does not permit
  failover.
  Exception#0
  com.ibm.crypto.hdwrCCA.provider.JCECCARuntimeException: Hardware
  error from call CSNDDSV returnCode 12 reasonCode 11060
  Stack Trace:
   at com.ibm.crypto.hdwrCCA.provider.Crypto.processVerify(
  Crypto.java:298)
   at
  com.ibm.crypto.hdwrCCA.provider.Crypto.verify(Crypto.java:868)
   at com.ibm.crypto.hdwrCCA.provider.SHAwithRSA.engineVeri
  fy(SHAwithRSA.java:393)
   at
  java.security.SignatureSpi.engineVerify(SignatureSpi.java:347)
   at java.security.Signature$Delegate.engineVerify(Signatu
  re.java:1409)
   at java.security.Signature.verify(Signature.java:826)
   at com.ibm.crypto.ibmjcehybrid.provider.HybridSignature.
  verify(HybridSignature.java:1945)
   at com.ibm.crypto.ibmjcehybrid.provider.HybridSignature.
  engineVerify(HybridSignature.java:1857)
   at java.security.Signature$Delegate.engineVerify(Signatu
  re.java:1403)
   at java.security.Signature.verify(Signature.java:777)
   at
  com.ibm.smp.GIMJVVFS.verifyPackageSignature(GIMJVVFS.java:532)
   at com.ibm.smp.GIMJVVFS.execute(GIMJVVFS.java:244)
   at com.ibm.smp.GIMJVCLT.main(GIMJVCLT.java:453)
  
  Blocking is active. Data caching is limited. blocksize =
  32768. Bytes passed since last reset = 36712
  FINER: This 32768 has failed and the fail-over is not possible.
  

Local fix

Problem summary

• IBMJCEHybrid does not failover because Signature exceeds
  blocksize of 32768
  

Problem conclusion

• Block size has been increased to handle larger amount of data in
  
  the event of a failover, similar to APAR PH19449
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
  IBM SDK, Java Technology Edition
   8 SR8 FP65 (8.0.8.65)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
   - Java SDK Products on z/OS
   https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels