IV91073: IKEYCMD IGNORES CUSTOM SECURITY PROPERTIES FILE PASSED USING -DJAVA.SECURITY.PROPERTIES AFTER APPLYING APAR IV90162

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  "<JAVA_HOME>/bin/ikeycmd
  -Djava.security.properties=<custom-file>" doesn't work.
  

Local fix

Problem summary

• In order to improve the jar checks, the java.security file needs
  to be loaded earlier. However, it was loaded prematurely even
  before setting the user provided security properties. As a
  result, the user supplied values for properties were not
  honoured.
  

Problem conclusion

• JDK has been updated to delay the loading of the java.secuirty
  file till it is required for the first instance of  the security
  verification so that  all the properties are properly set while
  loading the java.security file.
  .
  This APAR will be fixed in the following Java Releases:
     8    SR3 FP21  (8.0.3.21)
     6    SR16 FP40 (6.0.16.40)
     7 R1 SR4       (7.1.4.0)
     6 R1 SR8 FP40  (6.1.8.40)
     7    SR10      (7.0.10.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels

• R800 PSY

     UP

• R600 PSY

     UP

• R700 PSY

     UP