IC76103: CRYPTOGRAPHIC BINARY (CRYPTOBIN) ACTION OUTPUT MIGHT BE CORRUPT WHEN OUTPUT ENCODING IS DER, OUTPUT IS PIPE, AND INPUT SIZE >4K

APAR status

• Closed as program error.

Error description

• If the output encoding method is set to 'DER' and piped output
  is used, the Cryptographic Binary (CRYPTOBIN) action output
  might be corrupt for input data over 4K in size.
  

Local fix

• Modify configuration to avoid use of PIPE output.  This may be
  accomplished by use of a named context instead of PIPE, in
  either of the following ways:
  
  *  Output the encrypted PKCS7 DER output as input
      to another curl command for decryption.
  
  *  Input the named context to the PKCS7-DECRYPT.
  

Problem summary

• Crytographic Binary (CRYPTOBIN) action may not support
  "PIPE" output, the named context will be used when "PIPE" output
  is found on webgui.
  

Problem conclusion

• The fix is available in 3.8.0.13, 3.8.1.12 and 3.8.2.4.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R380 PSY

     UP

• R381 PSY

     UP

• R382 PSY

     UP