IJ39441: SSLV2HELLO PROPERTY VALUE IS IGNORED IF SPECIFIED IN JDK.TLS.DISABLEDALGORITHMS AND SSLV2HELLO IS SET BY SETENABLEDPROTOCOLS()

APAR status

• Closed as program error.

Error description

• Abstract Description:
  When SSLv2Hello is disabled by Security property
  jdk.tls.disabledAlgorithms, and if the application enables
  SSLv2Hello programmatically by calling setEnabledProtocols(),
  property's value SSLv2Hello is ignored.
  
  Error Message:
  N/A
  
  Stack Trace, if applicable:
  N/A
  
  
  Other Error Information, as reported by customer:
  N/A
  
  Workaround: Do not enable SSLv2Hello by setEnabledPtorocols(),
  if it should not be used.
  

Local fix

• N/A
  

Problem summary

• Security property jdk.tls.disabledAlgorithms does not work for
  SSLv2Hello algorithm.
  

Problem conclusion

• Security property jdk.tls.disabledAlgorithms can be used to
  disable SSLv2Hellos, even if the application try to enable it.
  
  The files affected by this APAR are:  ibmjsseprovider2.jar  -
  8.0 build_20220415--509
  
  The associated Hursley RTC Problem Report is 147392.
  
  The associated Austin Git issue is Issue #216 for IBMJSSE.
  
  The associated Austin APAR issue is IJ39441.
  
  The fix was delivered for:  Java 8.0 SR7 FP10.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA SECURE SOC

• Fixed component ID

  TIVSECJSS

Applicable component levels