IV60787: KEYTOOL -STOREPASSWD NOT WORKING FOR PKCS12 KEYSTORE

APAR status

• Closed as program error.

Error description

• Error Message: keytool error (likely untranslated):
  java.lang.UnsupportedOperationException: -storepasswd commands
  not supported if -storetype is PKCS12
  .
  Stack Trace: N/A
  .
  The option -storepasswd was originally usable to change keystore
  password before APAR IZ23423 fix.
  

Local fix

• Use ikeyman instead.
  

Problem summary

• Keytool option -storepasswd was not allowed to change keystore
  password for PKCS12 keystore
  

Problem conclusion

• This APAR will be fixed in the following Java Releases:
     6    SR16 FP1  (6.0.16.1)
     5.0  SR16 FP7  (5.0.16.7)
     6 R1 SR8 FP1   (6.1.8.1)
     7    SR7 FP1   (7.0.7.1)
     7 R1 SR1 FP1   (7.1.1.1)
  .
  A fix is made to IBMJCE provider to allow password changing for
  PKCS12 keystore for the following option combinations:1.
  -storepasswd2. -storepasswd -all3. -storepasswd -all -new
  <new_password>Please note that the option "-storepasswd -new
  <new_password>" without "-all" is not allowed to change
  password.The associated Hursley RTC Problem Report is 66184The
  associated Hursley CMVC defect is 202262The associated Austin
  CMVC defect is 115550The associated Austin APAR is IV60627JVMs
  affected: Java 5.0, Java 6.0, Java 626, Java 7.0 and Java 727The
  fix was delivered for Java 5.0 SR16FP7, Java 6.0 SR16FP1, Java
  626 SR8FP1, Java 7.0 SR7FP1 and Java 727 SR1FP1The affected jar
  is "ibmjceprovider.jar".The build level of this jar for the
  affected releases is "20140519"
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IV60788

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSY

     UP

• R260 PSY

     UP