IJ08063: ENHANCEMENT TO CERTPATH VALIDATOR CERTIFICATE EXPIRATION CHECK

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The CertPath validator's certificate expiration check has been
  enhanced.
  Ordinarily, the CertPath validator checks whether the timestamp
  specified within the PKIXParameters object
  falls within the validity period of each certificate checked.
  New logic has been added to check whether the parameters passed
  to the CertPath validator are an instance of
  PKIXExtendedParameters.
  If so, and if the PKIXExtendedParameters carry a variant that
  specifies VAR_CODE_SIGNING or VAR_PLUGIN_CODE_SIGNING, then the
  timestamp specified within the PKIXExtendedParameters is used
  instead.
  The associated RTC PR is 137546
  The associated Austin CMVC defect is 117847
  The affected jar is "ibmcertpathprovider.jar".
  JDKS affected include: Java 7.0, Java 7.1, and Java 8.0.
  This update was delivered for Java 7.0 SR10 FP30, Java 7.1 SR4
  FP30, and Java 8.0 SR5 FP20
  The build level of this jar for the affected releases is
  "20180418"
  

Problem conclusion

• See "Problem Summary".
  .
  This APAR will be fixed in the following Java Releases:
     8    SR5 FP20  (8.0.5.20)
     7 R1 SR4 FP30  (7.1.4.30)
     7    SR10 FP30 (7.0.10.30)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels