IBM Support

SI55492 - OSP-CERT-INCORROUT Failure to import PKCS#12 file containing

PTF Cover Letter


PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

OSP-CERT-INCORROUT Failure to import PKCS#12 file containing


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED      PTF/FIX  LEVEL

TYPE PROGRAM  REL  NUMBER   MIN/MAX  OPTION
---- -------- ---  -------  -------  ------
PRE  5761999  610  MF59396   00/00    0000
PRE  5761999  611  MF59397   00/00    0000
PRE  5761999  610  MF53398   00/00    0000
PRE  5761999  611  MF53399   00/00    0000
PRE  5761SS1  610  SI42195   00/00    0000
CO   5761SS1  610  SI51619   NONE     0034



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the license agreement which
accompanied, or was contained in, the Program for which you are obtaining
the PTF.  You are not authorized to install or use the PTF except as part
of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.

The applicable license agreement may have been provided to you in printed
form and/or may be viewed using the Work with Software Agreements (WRKSFWAGR)
CL command.





APAR Error Description / Circumvention

-----------------------------------------------
When importing an entire certificate store containing encrypted
(or shrouded) private keys from a PKCS#12 file, the import may
fail due to improperly parsing the encrypted private keys,
causing the import to fail and the private keys and certificates
to not be written to the certificates store.  This can occur
either through the QykmImportKeyStore API or DCM (Digital
Certificate Manager).

CORRECTION FOR APAR SE60776 :
-----------------------------
Applying this PTF will resolves the failure to import the
contents of the PKCS#12 file containing encrypted (or shrouded)
private keys and properly write the contents to the certificate
store.

CIRCUMVENTION FOR APAR SE60776 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI55355 :
=================================================

After loading and applying this PTF, the customer should end and
restart all affected TCP/IP servers.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI51618 :
=================================================

After loading and applying this PTF, all affected TCP/IP servers should
be ended and restarted.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   SI55355      OSP-INCORROUT DCM imported certificate has a blank label
   SI55257      OSP-INCORROUT Add support for X.509 LDAP domainComponent (XP
   SI51618      OSP-CERT-INCORROUT IMPORT OF DIGITAL CERTIFICATE WITH MANY S
   SI50264      OSP-CERT-INCORROUT ATTEMPT TO USE SSL CERT FAILS BECAUSE AN
   SI43742      OSP-CERT-INCORROUT SSL HANDSHAKE FAILS DUE TO UNSUCCESSFUL C
   SI42197      OSP Enable 4096 bit key support
   SI36407      OSP-CERT-UNPRED Certificate failed to import. The issuer of
   SI34945      Integrity Problem
   SI29190      osp-cert Reversioning change revisited
   SI29020      osp-cert Reversioning change

Summary Information

System..............................i
Models..............................
Release.............................V6R1M0
Licensed Program...............5761SS1
APAR Fixed..........................SE60776
Superseded by:......................View fix details for PTF SI66103
Recompile...........................N
Library.............................QICSS
MRI Feature ........................NONE
Cum Level...........................C5063610


System i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG15V","label":"PTF Cover Letters - OS\/400 General"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V6R1M0","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG16A","label":"PTF Cover Letters - i5\/OS V6R1 environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V6R1M0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
05 December 2014