PH61255: IBMJCECCA RETURNS WRONG SHA1 HASH VALUE FOR VERY LARGE FILES (>4G)

APAR status

• Closed as program error.

Error description

• Error Message: The expected SHA1 value differs from the expected
  (correct) value.
  .
  Stack Trace:
  .
  

Local fix

Problem summary

• This issue is encountered when using java.security.MessageDigest
  to calculate the SHA-1 hash for a large file >4GB. The problem
  is only seen for files larger than 4GB. With the default shipped
  java.security file, the OpenJCEPlus calculated hash value is
  correct. If IBMJCECCA is at the top of the security provider
  list, then the calculated value is incorrect.
  

Problem conclusion

• The 32 bit integers overflowed to 0 when more than 4G of data
  was processed. The APAR will be available in the CR24_02
  version.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
     11              11.0.23.0
     17              17.0.11.0
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

• The temporary fix suggested is to place OpenJCEPlus before
  IBMJCECCA in the security providers list.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels