IJ32576: NEGOTIATED FINITE FIELD DIFFIE-HELLMAN EPHEMERAL PARAMETERS FOR TLS

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
  TLS
  The IBM JSSE implementation now supports the TLS FFDHE
  mechanisms defined in RFC 7919. If a server cannot process the
  supported_groups TLS extension or the named groups in the
  extension, applications can either customize the supported group
  names with jdk.tls.namedGroups, or turn off the FFDHE mechanisms
  by setting the System Property jsse.enableFFDHE to false.
  

Problem conclusion

• Binary affected - ibmjsseprovider2.jar
  GIT Issue - #136
  RTC - 145026
  Build - 8.0 build_20210507--282
  JVM to be delivered in - JDK 8 SR6 FP35
  .
  This APAR will be fixed in the following Java Releases:
     8    SR6 FP35  (8.0.6.35)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels