IJ24022: UPDATES TO IBMJCEPLUS AND IBMJCE

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Provide updates to IBMJCEPlus and IBMJCE providers.
  

Problem conclusion

• IBMJCEPlus improvments:
    Enhance support for RSA-PSS including KeyFactory support for
  RSAPSS keys.
    Fixes for GCM on Z14.
    Performance enhancements to IBMJCEPlus native libraries.
    Fixes to ChaCha20 to produce correct results when IV is non
  zero.
    Changes to ChaCha20-Poly1305 to conform to known answers.
  
    Upgrade to GSKit 8.7.28.0
  IBMJCE improvements:
    KeyFactory support for RSAPSS keys.
  PKCS improvments:
    Provide correct verification of X509 certificate signed with
  RSAPSS.
  Component Issue Description
  ibmjce     #61 OSB: Oracle Security-in-Depth Fix 8234027: Better
  JCEKS key support (PR 143121)
  ibmjce     #66  Add RSA PSS KeyFactory support
  PKCS       #45  IBMTLSTest fails to verify certificate signed
  with non default RSA PSS parameters with IBMJCEPlus
  Changes were made to the following Java Security components
  ibmjceplus.jar Build-Date: 20200318
  ibmjceprovider.jar Build-Level: 20200311-314
  ibmpkcs.jar Build-Level: 20200312-188
  .
  This APAR will be fixed in the following Java Releases:
     8    SR6 FP10  (8.0.6.10)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels