IJ27674: CERTIFICATE WITH SUBJECT ALTERNATIVE NAME THAT INCLUDE OPAQUE URIS BREAKS

APAR status

• Closed as program error.

Error description

• Error Message: Null returned for Subject Alternative Name
  Extension value when extension contains non-URL value.
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Certificate with Subject Alternative Names that include opaque
  URIs breaks.  Certificates with a Subject Alternative Names
  extension value that is non-hierarchical will not parse
  correctly.
  

Problem conclusion

• The code used to parse a certificate's Subject Alternative Names
  extension value has been updated.
  A fix is made to PKCS
  The associated Hursley RTC Problem Report is 144181
  The associated Austin git defect is PKCS issue #70
  The associated Austin APAR is IJ26954
  JVMs affected: Java 8
  The fix was delivered for Java 8 SR6 FP25
  The affected jar is "ibmpkcs.jar".
  The build level of this jar for the affected releases is
  20200828-236
  .
  This APAR will be fixed in the following Java Releases:
     8    SR6 FP25  (8.0.6.25)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels