OA63520: HACL JSSE TECHNICAL EXTENSION

APAR status

• Closed as program error.

Error description

• In HACL JSSE class code, it displays all CA of the default
  JRE cacerts. No password is required, and no location path
  is required either which could cause a security breach.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Toolkit users who want to use Java certs for secure          *
  * connection authentication                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * HACL program fails to establish secure connection with JRE   *
  * Cacerts                                                      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  HACL program fails to read Java Cacerts to establish secure
  connection.
  
  If we are adding host certificate in Java Cacerts, HACL program
  does not read certs from here to authenticate the handshake.
  

Problem conclusion

• Code changes have been made to address the issue.
  
  Now, host certificate can be placed in JRE Cacerts and if we do
  not specify any Keystore in the program, it will by default read
  from JRE Cacerts.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• ToolKit
  

Fix information

• Fixed component name

  HOD MVS

• Fixed component ID

  5733A5900

Applicable component levels