PH57169: JAVA.NET.MALFORMEDURLEXCEPTION: UNKNOWN PROTOCOL: SAFKEYRING

APAR status

• Closed as program error.

Error description

• Error Message: unknown protocol: safkeyring
  .
  Stack Trace: java.net.MalformedURLException: unknown protocol:
  safkeyring
          at java.base/java.net.URL.<init>(URL.java:652)
          at java.base/java.net.URL.<init>(URL.java:541)
          at java.base/java.net.URL.<init>(URL.java:488)
          at TestSAF.main(TestSAF.java:38)
  .
  

Local fix

Problem summary

• java.net.MalformedURLException: unknown protocol: safkeyring
  According to the IBM Java 11 migration guide the IBMZSecurity,
  IBMJCECCA, and IBMJCEHYBRID providers does not support
  "safkeyring" as was done in Java 8 but instead uses
  "safkeyringjce". I find this problematic as it requires changes
  to configuration parameters in third-party applications
  depending on the Java release.
  IBMZSecurity, IBMJCECCA, and IBMJCEHYBRID providers should
  accept "safkeyring" so no existing configuration files need be
  changed for Java 8 applications moving to Java 11.
  

Problem conclusion

• Semeru 11 IBMZSecurity, IBMJCECCA, and IBMJCEHYBRID providers
  now accept "safkeyring".
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
     11              11.0.20.1
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  maintenance can be found at:
             https://www.ibm.com/support/pages/java-sdk
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels