IV71249: SETTING -DJAVA.SYSTEM.CLASS.LOADER CAUSES A SECURITYEXCEPTION WH EN USING CRYPTO

APAR status

• Closed as program error.

Error description

• Error Message: User may see SecurityException's if they are
  trying to use a custom system class loader.
  .
  Stack Trace: java.lang.SecurityException:
  com.ibm.jit.crypto.JITAESCryptInHardwareat
  com.ibm.jit.crypto.JITAESCryptInHardware.getCryptoat
  com.ibm.crypto.provider.ax.<clinit>at
  com.ibm.crypto.provider.IBMJCE.<clinit>
  .
  The following classes may also appear in the stack, instead of
  com.ibm.jit.crypto.JITAESCryptInHardware:com.ibm.jit.crypto.JITF
  ullHardwareCryptcom.ibm.jit.crypto.JITFullHardwareDigestcom.ibm.
  jit.Crypto
  

Local fix

Problem summary

• Security is not checked correctly if a custom system class
  loader is specified via the '-Djava.system.class.loader' java
  command line option.
  

Problem conclusion

• The VM has been changed to correctly check security.
  .
  This APAR will be fixed in the following Java Releases:
     8    SR1       (8.0.1.0)
     7    SR9       (7.0.9.0)
     7 R1 SR3       (7.1.3.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the Service
  Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  J9 COMMON CODE

• Fixed component ID

  620700127

Applicable component levels

• R270 PSY

     UP

• R260 PSY

     UP