IJ53195: ENTRUST ROOT CERTIFICATES NOT TRUSTED AFTER 11TH NOVEMBER 2024.

APAR status

• Closed as program error.

Error description

• Error Message: (Entrust) root certificate not trusted.
  .
  Stack Trace: N/A
  .
  

Local fix

• See
  https://ibmdocs-test.dcs.ibm.com/docs/en/SSYKE2_8.0.0_test?topic
  =wn-service-refresh-8#security_whatsnew_sr8__fp35__title__1
  

Problem summary

• TLS server certificates anchored by Entrust root certificates
  and created after 11 November 2024 are not trusted.
  

Problem conclusion

• The relevant certificates are trusted by using the workaround.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
    21              21.0.6.0
    17              17.0.14.0
    11              11.0.26.0
  IBM SDK, Java Technology Edition
    8    SR8 FP40  (8.0.8.40)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
   - IBM Semeru Runtimes, Version 11 and later
     https://www.ibm.com/semeru-runtimes/downloads/
   - IBM SDK, Java Technology Edition, Version 8
     https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
   - Java SDK Products on z/OS
     https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IJ53197

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels