IZ98673: UNABLE TO OPEN CACERTS FILE USING IKEYMAN. IT FAILS ON ALIAS ENTRUSTEVCA.

APAR status

• Closed as program error.

Error description

• Unable to open cacerts file using ikeyman.  It fails on alias
  entrustevca.
  
  JVMs affected:  1.4.2, 5.0, 6.0 and 6.26.
  

Local fix

• N/A
  

Problem summary

•     AVA.java fails processing escaped chars
  within attribute values
  
  PROBLEM DESCRIPTION:
  
  Unable to open cacerts file using ikeyman.  It fails on the
  certificate with the alias entrustevca with the following error:
  
  The key for label 'entrustevca' could not be recovered.
  Error Code:
  112
  Stack Trace:
  com.ibm.gsk.ikeyman.error.KeyManagerException:
  com.ibm.gsk.ikeyman.error.KeyManagerException:
  java.io.IOException: Incorrect AVA format
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$BasicKeyStoreBag.ma
  keEntry(EntryBagFactory.java:540)
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$AbstractKeyStoreBag
  .getItem(EntryBagFactory.java:387)
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$CompoundEntryBag.ge
  tItem(EntryBagFactory.java:691)
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$AbstractEntryContai
  nerBag.getItem(EntryBagFactory.java:196)
   at
  com.ibm.gsk.ikeyman.keystore.EntryInterfaceFactory$CompoundEntry
  Interface.getItem(EntryInterfaceFactory.java:360)
   at
  com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory$KeyStoreItemImp
  l.getEntries(KeyStoreItemFactory.java:731)
   at
  com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory$KeyStoreItemImp
  l.getCertificates(KeyStoreItemFactory.java:772)
   at
  com.ibm.gsk.ikeyman.keystore.KeyStoreItemFactory$KeyStoreItemImp
  l.getInfo(KeyStoreItemFactory.java:787)
   at
  com.ibm.gsk.ikeyman.command.Command.fireKeyManagerEventDatabaseO
  pened(Command.java:125)
   at
  com.ibm.gsk.ikeyman.command.CommandFactory$LoadDbCommand.run(Com
  mandFactory.java:533)
   at com.ibm.gsk.ikeyman.command.Command.invoke(Command.java:201)
   at
  com.ibm.gsk.ikeyman.command.gui.KeymanController$Invoker.invoke(
  KeymanController.java:261)
   at
  com.ibm.gsk.ikeyman.command.gui.KeymanController.actionPerformed
  (KeymanController.java:94)
   at
  com.ibm.gsk.ikeyman.gui.KeymanFrame$KeymanAction.actionPerformed
  (KeymanFrame.java:741)
   at
  javax.swing.AbstractButton.fireActionPerformed(AbstractButton.ja
  va:2018)
   at
  javax.swing.AbstractButton$Handler.actionPerformed(AbstractButto
  n.java:2341)
   at
  javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButton
  Model.java:402)
   at
  javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.jav
  a:259)
   at
  javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicBu
  ttonListener.java:252)
   at
  java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.j
  ava:289)
   at java.awt.Component.processMouseEvent(Component.java:6437)
   at
  javax.swing.JComponent.processMouseEvent(JComponent.java:3321)
   at java.awt.Component.processEvent(Component.java:6202)
   at java.awt.Container.processEvent(Container.java:2213)
   at java.awt.Component.dispatchEventImpl(Component.java:4793)
   at java.awt.Container.dispatchEventImpl(Container.java:2271)
   at java.awt.Component.dispatchEvent(Component.java:4619)
   at
  java.awt.LightweightDispatcher.retargetMouseEvent(Container.java
  :4816)
   at
  java.awt.LightweightDispatcher.processMouseEvent(Container.java:
  4476)
   at
  java.awt.LightweightDispatcher.dispatchEvent(Container.java:4406
  )
   at java.awt.Container.dispatchEventImpl(Container.java:2257)
   at java.awt.Window.dispatchEventImpl(Window.java:2677)
   at java.awt.Component.dispatchEvent(Component.java:4619)
   at java.awt.EventQueue.dispatchEvent(EventQueue.java:662)
   at
  java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatc
  hThread.java:211)
   at
  java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchTh
  read.java:128)
   at
  java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatc
  hThread.java:117)
   at
  java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java
  :113)
   at
  java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java
  :105)
   at
  java.awt.EventDispatchThread.run(EventDispatchThread.java:90)
  Caused by: com.ibm.gsk.ikeyman.error.KeyManagerException:
  java.io.IOException: Incorrect AVA format
   at
  com.ibm.gsk.ikeyman.keystore.entry.DisplayItemFactory$DNItemImpl
  .<init>(DisplayItemFactory.java:513)
   at
  com.ibm.gsk.ikeyman.keystore.entry.DisplayItemFactory$DNItemImpl
  .<init>(DisplayItemFactory.java:444)
   at
  com.ibm.gsk.ikeyman.keystore.entry.DisplayItemFactory.getDNItem(
  DisplayItemFactory.java:149)
   at
  com.ibm.gsk.ikeyman.keystore.entry.CertificateItemImpl.populateD
  ata(CertificateItemImpl.java:73)
   at
  com.ibm.gsk.ikeyman.keystore.entry.CertificateItemImpl.<init>(Ce
  rtificateItemImpl.java:55)
   at
  com.ibm.gsk.ikeyman.keystore.entry.EntryFactory.newCertificateIt
  em(EntryFactory.java:116)
   at
  com.ibm.gsk.ikeyman.keystore.EntryMakerFactory$CertMaker.makeEnt
  ry(EntryMakerFactory.java:172)
   at
  com.ibm.gsk.ikeyman.keystore.EntryMakerFactory$CertMaker.makeEnt
  ry(EntryMakerFactory.java:156)
   at
  com.ibm.gsk.ikeyman.keystore.EntryBagFactory$BasicKeyStoreBag.ma
  keEntry(EntryBagFactory.java:481)
   ... 39 more
  Caused by: java.io.IOException: Incorrect AVA format
   at com.ibm.security.x509.AVA.readChar(AVA.java:1003)
   at com.ibm.security.x509.AVA.<init>(AVA.java:236)
   at com.ibm.security.x509.AVA.<init>(AVA.java:185)
   at com.ibm.security.x509.RDN.<init>(RDN.java:142)
   at com.ibm.security.x509.X500Name.parseDN(X500Name.java:1126)
   at com.ibm.security.x509.X500Name.<init>(X500Name.java:166)
   at com.ibm.security.x509.X500Name.<init>(X500Name.java:148)
   at
  com.ibm.gsk.ikeyman.keystore.entry.DisplayItemFactory$DNItemImpl
  .<init>(DisplayItemFactory.java:509)
   ... 47 more
  

Problem conclusion

• A problem was discovered within the AVA.java class in logic
  which parses escaped characters within the value of
  a distinguished name attribute.
  
  
  
  
  The associated Hursley CMVC defects are 178678 and 178489.
  The associated Austin CMVC defect is 111954.
  The fix is being dropped for   Java 1.4.2 SR14,  Java 5.0 SR 13,
  Java 6.0 SR10, and Java 60_26 SR1.
  
  The affected jar is "ibmpkcs.jar".
  The build level of this jar for Java 1.4.2 is 20110404
  The build level of this jar for Java 5.0    is 20110404
  The build level of this jar for Java 6.0     is 20110404
  The build level of this jar for Java 60_26 is 20110404
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIVOLI JAVA PKC

• Fixed component ID

  TIVSECPKC

Applicable component levels

• R100 PSY

     UP