IJ29161: MMKEYSERV SERVER SHOW IS NOT SHOWING ENDPOINT CERT EXPIRATION

APAR status

• Closed as program error.

Error description

• mmkeyserv server show is showing the latest exp
  info in cert chain, which may not necessary to be
  endPoint cert expiration
  
  Reported In:
  
  Spectrum Scale 5.0.5.0
  
  Known Impact:
  
  Customer may confuse why it shows rootCA exp info
  instead of endpoint
  

Local fix

Problem summary

• The mmkeyserv command displays
  the latest expiration date from the
  KMIPT certificate chain.  It should
  display the expiration date of
  the end-entity certificate.
  

Problem conclusion

• Benefits of the solution:
  Display the expiration date of the
  end-entity certificate correctly.
  
  Work Around:
  Use openssl to display and view
  each certificate in the chain to
  determine the correct expiration date.
  
  Problem trigger:
  mmkeyserv command "show" output
  
  Symptom:
      Error output/message
  
  Platforms affected:
    Linux and AIX
  
  Functional Area affected:
      All Scale Users
      Admin Commands
      Encryption
  
  Customer Impact:
      Suggested
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IJ28570

• APAR is sysrouted TO one or more of the following:

  IJ29679

Fix information

• Fixed component name

  SPEC SCALE STD

• Fixed component ID

  5737F33AP

Applicable component levels