IV00781: OCSPCHECKER.JAVA ACCIDENTALLY NULLS OUT CERTIFICATE REVOCATION S TATUS RECEIVED FROM RESPONDER

APAR status

• Closed as program error.

Error description

• Error Message: When CertPath is configured to learn the location
  of the
  OCSP responder from the Authority Information Access extension
  of the certificate, a revoked certifiate
  causes an incorrect exception to be thrown.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• When CertPath is configured to learn the location of the
  responder from the Authority Information Access extension
  of the certificate being processed, a path within the CertPath
  code throws an exception which causes the
  certificate's revocation status received from the responder to
  be lost. This path also causes an incorrect
  exception to be thrown.
  

Problem conclusion

• This defect will be fixed in:
  5.0.0 SR13
  6.0.0 SR10
  .
  A fix has been applied to the OCSPChecker class of the CertPath
  provider to preserve the revocation status
  received from the responder and to correctly report the
  revocation status of the certificate.
  .
  To obtain the fix:
  Install build 20110527 or later
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IV00763

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSY

     UP