IJ10800: REMOVE EXPIRING ROOT CERTIFICATES IN IBM JDK'S CACERTS.

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• IBM JDK's cacerts had these 25 expiring root certificates, which
  will not be renewed by the respective vendors -
  baltimorecodesigningca (Baltimore CyberTrust Code Signing root
  certificate)
  equifaxsecureebusinessca1 (Equifax Secure eBusiness CA-1)
  equifaxsecureebusinessca2 (Equifax Secure eBusiness CA-2)
  equifaxsecureglobalebusinessca1 (Equifax Secure Global eBusiness
  CA-1)
  secomvalicertclass1ca (ValiCert Class 1 Policy Validation
  Authority)
  secomevrootca1 (Security Communication EV RootCA1)
  soneraclass1ca (Sonera Class1 CA)
  thawtepersonalbasicca
  thawtepersonalfreemailca
  thawtepersonalpremiumca
  thawtepremiumserverca2
  thawtepremiumserverca
  thawteserverca
  trustcenterclass2caii (TC TrustCenter Class 2 CA II)
  trustcenterclass4caii (TC TrustCenter Class 4 CA II)
  trustcenteruniversalcai (TC TrustCenter Universal CA I)
  utndatacorpsgcca (UTN - DATACorp SGC)
  valicertclass2ca (ValiCert Class 2 Policy Validation Authority)
  verisignclass1ca (ValiCert Class 1 Policy Validation Authority)
  verisignclass1ca2
  verisignclass1g2ca
  verisignclass1g3ca
  verisignclass2ca
  verisignclass2g3ca
  verisignclass3ca
  

Problem conclusion

• The certificates listed above are removed and no longer a  part
  of cacerts file.
  .
  This APAR will be fixed in the following Java Releases:
     8    SR5 FP25  (8.0.5.25)
     7 R1 SR4 FP35  (7.1.4.35)
     6    SR16 FP75 (6.0.16.75)
     6 R1 SR8 FP75  (6.1.8.75)
     7    SR10 FP35 (7.0.10.35)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels

• R800 PSY

     UP

• R700 PSY

     UP

• R600 PSY

     UP