APAR status
Closed as program error.
Error description
Error Message: java.security.ProviderException: Failure in engineDoFinal . Stack Trace: <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R javax.crypto.AEADBadTagException: ICC_AES_GCM_En/DecryptFinal failed <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R at com.ibm.crypto.plus.provider.AESGCMCipher.engineDoFinal(AESGCMCi pher.java:114) <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R at javax.crypto.Cipher.doFinal(Unknown Source) <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R at com.ibm.jsse2.n.a(n.java:34) <OSB>6/10/20 20:51:21:558 CEST<CSB> 00000089 SystemErr R at com.ibm.jsse2.b.a(b.java:96) <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R at com.ibm.jsse2.av.a(av.java:957) <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R at com.ibm.jsse2.av.a(av.java:513) <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R at com.ibm.jsse2.f.read(f.java:9) <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R at com.ibm.rmi.iiop.Connection.readMoreData(Connection.java:1781) <OSB>6/10/20 20:51:21:559 CEST<CSB> 00000089 SystemErr R at com.ibm.rmi.iiop.Connection.createInputStream(Connection.java:15 69) <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemErr R at com.ibm.rmi.iiop.Connection.doReaderWorkOnce(Connection.java:343 9) <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemErr R at com.ibm.rmi.transport.ReaderThread.run(ReaderPoolImpl.java:131) <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemOut O ICC_AES_GCM_En/DecryptFinal failed <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemOut O Padded plaintext after DECRYPTION: len = 18 <OSB>6/10/20 20:51:21:560 CEST<CSB> 00000089 SystemOut O 0000: 02 50 9d ab bd 41 80 57 97 cd 6e 15 ba 0c 22 34 .P...A.W..n... .
Local fix
Use IBMJCE
Problem summary
The problem was caused because the FastJNI output buffer was no taking into account the tag lenght.
Problem conclusion
updated the code to create the needed buffer size. Austin APAR - IJ25832 IBMJCEPlus build - build-20200728 . This APAR will be fixed in the following Java Releases: 8 SR6 FP25 (8.0.6.25) . Contact your IBM Product's Service Team for these Service Refreshes and Fix Packs. For those running stand-alone, information about the available Service Refreshes and Fix Packs can be found at: https://www.ibm.com/developerworks/java/jdk/
Temporary fix
Comments
APAR Information
APAR number
IJ27178
Reported component name
SECURITY
Reported component ID
620700125
Reported release
270
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2020-08-20
Closed date
2020-08-24
Last modified date
2020-11-23
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
SECURITY
Fixed component ID
620700125
Applicable component levels
[{"Line of Business":{"code":"LOB36","label":"IBM Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"270"}]
Document Information
Modified date:
24 November 2020