IV50018: AIX:SVT_SECURITY.SECURITY.JARSIGNER TEST FAILING BCZ EXPRD ENTR

APAR status

• Closed as program error.

Error description

• Error Message: SVT_Security.security.jarsigner test is failing.
  throwing ERROR: ibmpkcs11impl.jar has Expired Entries!!
  .
  Stack Trace: >> 2013 Wed Sep 11 08:08:06   jarsigner Test
  Starting
  >> 2013 Wed Sep 11 08:08:11 Generating the list of all signed
  jar(s) in the sdk....
  >> 2013 Wed Sep 11 08:08:16 Checking the list of jars for
  excluded jars from
  /results/axxon/aix_ppc-64/180543/23691912/security.jarsigner/qui
  nts03-jarsigner-m106-20130911-080806/sdkJarList.txt
  >> 2013 Wed Sep 11 08:08:16 Excluding US_export_policy.jar from
  jar list if present...
  >> 2013 Wed Sep 11 08:08:16 Excluding local_policy.jar from jar
  list if present...
  >> 2013 Wed Sep 11 08:08:16 Excluding jhcore__V1.0.jar from jar
  list if present...
  >> 2013 Wed Sep 11 08:08:16 Excluding US_export_policy_56bit.jar
  from jar list if present...
  >> 2013 Wed Sep 11 08:08:16 Excluding local_policy_56bit.jar
  from jar list if present...
  >> 2013 Wed Sep 11 08:08:16 The ext directory is
  /jtctest/sdk_installs/ESPRESSO/PKG/pap6470sr6/pap6470sr6-2013091
  0_03/sdk/jre/lib/ext
  >> 2013 Wed Sep 11 08:08:16 Copying ibmjceprovider.jar
  >> 2013 Wed Sep 11 08:08:16 ibmjceprovider.jar successfully
  copied
  >> 2013 Wed Sep 11 08:08:21 Extracting ibmjceprovider jar... OK
  >> 2013 Wed Sep 11 08:08:26 Creating ibmjceprovider jar... OK
  >> 2013 Wed Sep 11 08:08:36 Creating RSA keypair with keytool...
  OK
  >> 2013 Wed Sep 11 08:08:36 Checking if rsastore.jks is
  created... OK
  >> 2013 Wed Sep 11 08:08:36 Checking if rsastore.jks is
  created... OK
  >> 2013 Wed Sep 11 08:08:46 Signing ibmjceprovider jar... OK
  >> 2013 Wed Sep 11 08:08:46 Creating RSA signed jar... OK
  >> 2013 Wed Sep 11 08:08:46 ...Done
  >> 2013 Wed Sep 11 08:08:46 Validating the signed jar(s) in the
  sdk, signature should be valid for next one year from test build
  date!
  >> 2013 Wed Sep 11 08:08:46 Verifying ibmjcefips.jar...
  >> 2013 Wed Sep 11 08:08:46 jarsigner -verify -certs -verbose
  /jtctest/sdk_installs/ESPRESSO/PKG/pap6470sr6/pap6470sr6-2013091
  0_03/sdk/jre/lib/ext/ibmjcefips.jar
  >> 2013 Wed Sep 11 08:08:51 Verifying ibmjceprovider.jar...
  >> 2013 Wed Sep 11 08:08:51 jarsigner -verify -certs -verbose
  /jtctest/sdk_installs/ESPRESSO/PKG/pap6470sr6/pap6470sr6-2013091
  0_03/sdk/jre/lib/ext/ibmjceprovider.jar
  >> 2013 Wed Sep 11 08:08:57 Verifying ibmpkcs11impl.jar...
  >> 2013 Wed Sep 11 08:08:57 jarsigner -verify -certs -verbose
  /jtctest/sdk_installs/ESPRESSO/PKG/pap6470sr6/pap6470sr6-2013091
  0_03/sdk/jre/lib/ext/ibmpkcs11impl.jar
  >> 2013 Wed Sep 11 08:09:02 ERROR: ibmpkcs11impl.jar has Expired
  Entries!!
  .
  N/A
  

Local fix

• N/A
  

Problem summary

• ibmpkcs11impl.jar was signed with wrong certificate.
  

Problem conclusion

• This defect will be fixed in:
  7.0.0 SR6
  6.0.1 SR7
  6.0.0 SR15
  .
  Sign ibmpkcs11impl.jar with correct certificate.
  The associated Hursley CMVC defect is 200133.
  Platform affected: All platforms.
  Jars affected: ibmpkcs11impl.jar.
  The fix will be available in 160_SR15, 626_SR7, and 170_SR6.
  Build level is 20130913.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R260 PSY

     UP

• R600 PSY

     UP