IV90630: DEFECT IN IBMCMSPROVIDER 2.0 BLD 56

PI76220: SHIP JDK IX90179 AS AN IFIX FOR WAS 8.0.0

APAR status

• Closed as program error.

Error description

• Error Message: Method
  CMSLoadStoreParameterFactory.newCMSStoreParameter(java.io.File,
  java.security.KeyStore.PasswordProtection, boolean) removed in
  IBMCMSProvider 2.56
  .
  Stack Trace:
  com.ibm.ws.management.connector.soap.SOAPConnection.handleReques
  t(SOAPConnection.java:65)
  at
  com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnecti
  on.java:733)
  at com.ibm.ws.http.HttpConnection.run(HttpConnection.java:522)
  at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1892)
  Caused by: java.lang.NoSuchMethodError:
  com/ibm/security/cmskeystore/CMSLoadStoreParameterFactory.newCMS
  StoreParameter(Ljava/io/File;Ljava/security/KeyStore$ProtectionP
  arameter;Z)Ljava/security/KeyStore$LoadStoreParameter;
  at
  com.ibm.ws.ssl.config.CMSKeyStoreUtility.storeCMSKeyStore(CMSKey
  StoreUtility.java:79)
  ... 45 more
  .
  

Local fix

• To use the new method
  CMSLoadStoreParameterFactory.newCMSStoreParameter(java.io.File,
  java.security.KeyStore.PasswordProtection, boolean, boolean)
  instead.
  

Problem summary

• In CMSprovider version 2.56, to support the older stash file
  format, the following CMSprovider's api were modified:-
  API  1:
  KeyStore.LoadStoreParameter newCMSStoreParameter(File ksFile,
  KeyStore.ProtectionParameter protection,boolean stashPassword)
  to
  KeyStore.LoadStoreParameter newCMSStoreParameter(         File
  ksFile, KeyStore.ProtectionParameter protection, boolean
  stashPassword, boolean stashV1Password)
  API 2:
  KeyStore.LoadStoreParameter newCMSStoreParameter(File ksFile,
  KeyStore.ProtectionParameter protection, boolean stashPassword,
  int passwordExpiry)
  to
  KeyStore.LoadStoreParameter newCMSStoreParameter(File ksFile,
  KeyStore.ProtectionParameter protection, boolean stashPassword,
  boolean stashV1Password, int passwordExpiry)
  The above changes breaks WAS (Websphere) build.
  

Problem conclusion

• Solution is to keep both the old and new method. If older method
  is used, the support for older stash file format is disabled
  i.e. User will need to use the more secured stash file format.
  .
  This APAR will be fixed in the following Java Releases:
     6 R1 SR8 FP40  (6.1.8.40)
     7 R1 SR4       (7.1.4.0)
     6    SR16 FP40 (6.0.16.40)
     8    SR3 FP21  (8.0.3.21)
     7    SR10      (7.0.10.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R260 PSY

     UP

• R600 PSY

     UP

• R270 PSY

     UP