APAR status
Closed as program error.
Error description
Error Message: N/A . Stack Trace: N/A . When com.ibm.jsse2.usefipsprovider=true, only NIST recommended elliptic curves (see FIPS 186-3) should be included in Hello Extension. Note that when the deprecated property com.ibm.jsse2.JSSEFIPS=true is specified, cipher suites with EC key exchange are not allowed. Thus no curve names will be sent in Hello Extension.
Local fix
N/A
Problem summary
Only NIST recommended Elliptic Curves should be added in Hello Extension in FIPS mode
Problem conclusion
This defect will be fixed in: 7.0.0 SR4FP1 6.0.1 SR5FP1 6.0.0 SR13FP1 . A fix is made to IBMJSSE2 provider to use only NIST recommended Elliptic Curves in FIPS mode The associated Hursley CMVC defect is 196129 The associated Austin CMVC defect is 113471 JVMs affected: Java 7 SR3, Java 6 R26 SR4, Java 6 SR12 The fix was delivered for Java 7 SR4FP1, Java 6 R26 SR5FP1, Java 6 SR13FP1. The affected jar is "ibmjsseprovider2.jar". The build level of this jar for the affected releases is "20130208"
Temporary fix
Comments
APAR Information
APAR number
IV36882
Reported component name
SECURITY
Reported component ID
620700125
Reported release
260
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2013-02-18
Closed date
2013-03-18
Last modified date
2013-03-18
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
SECURITY
Fixed component ID
620700125
Applicable component levels
R260 PSY
UP
R600 PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"260","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
Document Information
Modified date:
07 December 2020