IJ51954: IBM KEY CERTIFICATE MANAGEMENT SUBJECTDN NOT FORMATTED PER RFC2253

APAR status

• Closed as program error.

Error description

• Error Message: None.
  .
  Stack Trace: None.
  .
  None.
  

Local fix

• Specify dn parameter as null or empty string and provide
  complete string as subject parameter to new certificate request
  APIs in PkEeCertReqFactory class.
  

Problem summary

• IBM Key Certificate Management Subject not formatted per RFC2253
  of certificate request.
  When construct the certificate request by invoking
  PkEeReqTransaction.getPKCS10CertReq API, IBMKCM component
  incorrectly constructs the SubjectDN value if DN parameter
  contains spaces after comma in attribute value.
  

Problem conclusion

• Key Certificate Management has been updated to add correct
  distinguished names as per RFC2253
  Binary affected - ibmkeycert.jar
  GIT Issues - IBMKCM #37
  RTC Problem Report - 151465
  Build version: Java 8 - build_20240717--70
  JVM to be delivered in: JDK 8 SR8 FP35
  .
  This APAR will be fixed in the following Releases:
  .
  IBM SDK, Java Technology Edition
     8    SR8 FP35  (8.0.8.35)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
    - IBM Semeru Runtimes, Version 11 and later
      https://www.ibm.com/semeru-runtimes/downloads/
    - IBM SDK, Java Technology Edition, Version 8
      https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels