IJ18830: MEMORY GROWTH IN IBMJCEPLUS PROVIDER WHILE USING AESGCM IN TLS1.2 PROTOCOL

APAR status

• Closed as program error.

Error description

• Error Message: Memory growth  when using IBMJCEPLUS security
  provider. Issue happens when using SSL Cipher suite
  SSL_WITH_RSA_AES_256_GCM_SHA384 with TLS 1.2, used to  establish
  SSL database connection from WebSphere Application Server to
  Oracle Database 18c.
  .
  Stack Trace: None.
  .
  The issue is not observed while using IBMJCE provider. The
  problem was observed on AIX 7.2, while using the JRE 1.8.0 AIX
  ppc64-64 (build 8.0.5.35 - pap6480sr5fp35-20190418_01(SR5 FP35).
  

Local fix

• Use IBMJCE provider.
  

Problem summary

• Memory growth in IBMJCEPlus provider while using AESGCM in
  TLS1.2 protocol
  

Problem conclusion

• The JVM has been updated on all the supported platforms to fix
  the memory leak in IBMJCEPlus provider while using AESGCM crypto
  algorithm.
  The associated Hursley RTC Problem Report is 142095
  The associated Austin GitHub task is 226
  JVMs affected Java 8.0
  The fix was delivered for Java 8.0 SR6
  The affected jar is "ibmjceplus.jar"
  Other affected files:  jgskit.dll for Windows and libjgskit.so
  for other platforms.
  Austin Build Levels:  20190812
  .
  This APAR will be fixed in the following Java Releases:
     8    SR6  (8.0.6.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels