APAR status
Closed as program error.
Error description
Error Message: There is a bug in IBM JRE, the XML Digital Signature (XML dSig) implementation. It is impossible to create an XML dSig with Manifest References. The XML dSig implementation does not digest the references when signing. It also removes pre-calculated digest values from references in manifest. This makes it impossible to produce a signature with a manifest. The bug is present in both Java 6 and 7. JRE7. . Stack Trace: N/A .
Local fix
Problem summary
XML signature implementation does not digest references in Manifest.
Problem conclusion
This defect will be fixed in: 7.0.0 SR5 6.0.1 SR6 6.0.0 SR14 . Added the code to digest all the references in Manifest. The associated Austin CMVC defect 113517. The associated Hursley CMVC defect 196182. The fix was delivered for Java 6.0 SR14, Java 626 SR6, and Java 7.0 SR5. The affected jar is ibmxmlcrypto.jar (level 20130214).
Temporary fix
Comments
APAR Information
APAR number
IV36815
Reported component name
SECURITY
Reported component ID
620700125
Reported release
600
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2013-02-14
Closed date
2013-02-22
Last modified date
2013-02-26
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
SECURITY
Fixed component ID
620700125
Applicable component levels
R260 PSY
UP
R600 PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
Document Information
Modified date:
07 December 2020