IV15420: IBMJCECCA PROVIDER USES WRONG OIDS FOR RSA SIGNATURE ALGORITHMS, SHA1WITHRSA, SHA2WITHRSA, SHA3WITHRSA, AND SHA5WITHRSA

APAR status

• Closed as program error.

Error description

• Error Message: The IBMJCECCA provider uses wrong OIDs for RSA
  signature algorithms. The wrong OIDs are 1.3.14.3.2.26 for
  SHA1withRSA, 2.16.840.1.101.3.4.2.1 for SHA2withRSA,
  2.16.840.1.101.3.4.2.2 for SHA3withRSA, and
  2.16.840.1.101.3.4.2.3 for SHA5withRSA.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• The IBMJCECCA provider uses wrong OIDs for RSA signature
  algorithms.
  

Problem conclusion

• This defect will be fixed in:
  7.0.0 SR1
  .
  The OID associated with each RSA signature algorithm is updated
  to the correct OID. The correct OIDs are 1.2.840.113549.1.1.5
  for SHA1withRSA, 1.2.840.113549.1.1.11 for SHA2withRSA,
  1.2.840.113549.1.1.12 for SHA3withRSA, and 1.2.840.113549.1.1.13
  for SHA5withRSA.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R260 PSY

     UP