IJ51405: JAVA RPM WILL NOT VERIFY UPON INSTALL WITH FIPS ENABLED

APAR status

• Closed as program error.

Error description

• Error Message: package ibm-java-x86_64-sdk.x86_64 does not
  verify: no digest
  rpm --checksig --verbose ibm-java-x86_64-sdk.x86_64.rpm
  ibm-java-x86_64-sdk.x86_64.rpm:
   Header SHA1 digest: OK
   MD5 digest: OK
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• With FIPS enabled the Java rpm packages fail to install with
  error message "no digest". This is because the Java rpm packages
  were built with rpm 4.8 which doesn't support the SHA256 Payload
  and SHA256 HEADER.
  

Problem conclusion

• The Java RPM packages are now built with the later rpm 14.1
  which supports the SHA256 Payload and SHA256 HEADER. This
  resolves the issue.
   Output:
  Header V4 RSA/SHA256 Signature, key ID 8a8d4582: NOKEY
    Header SHA256 digest: OK
    Header SHA1 digest: OK
    Payload SHA256 digest: OK
  
  .
  This APAR will be fixed in the following Releases:
  .
  IBM SDK, Java Technology Edition
     8    SR8 FP26  (8.0.8.26)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
    - IBM Semeru Runtimes, Version 11 and later
      https://www.ibm.com/semeru-runtimes/downloads/
    - IBM SDK, Java Technology Edition, Version 8
      https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA COMP AND P

• Fixed component ID

  620700133

Applicable component levels