IBM Support

PM72534: CERTIFICATE IMPORT SCRIPTS MISHANDLE JKS AND PFX FILES WITH PASSWORDS.

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When a keystore is imported, the import script for the
certificate does not update the certificate password to match
the password in defaultKeystore.jks, which causes the error:
"java.security.UnrecoverableKeyException: Cannot recover key"

Local fix

  • 



Problem summary


    

  • ****************************************************************
* USERS AFFECTED: Users of DB2 Query Monitor.                  *
****************************************************************
* PROBLEM DESCRIPTION: When a keystore is imported, the        *
*                      import script for the certificate does  *
*                      not update the certificate password to  *
*                      match the password in defaultKeystore.  *
*                      jks, which causes the error:            *
*                      "java.security.                         *
*                      UnrecoverableKeyException: Cannot       *
*                      recover key"                            *
****************************************************************
* RECOMMENDATION: APPLY the PTF.                               *
****************************************************************
Code has been changed to correct this condition.

    



Problem conclusion


    

  • APPLY the PTF.

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    PM72534
    • 

  • Reported component name
    DB2 QUERY MONIT
    • 

  • Reported component ID
    5655E6701
    • 

  • Reported release
    310
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2012-09-10
    • 

  • Closed date
    2012-10-26
    • 

  • Last modified date
    2012-12-04
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    
UK83024
    

    • 



Modules/Macros


    

  •    CQMBLOB  CQMCAEPT CQMCPXPT CQMICRT  CQMJAR

    



Fix information


    

  • Fixed component name
    DB2 QUERY MONIT
    • 

  • Fixed component ID
    5655E6701
    • 



Applicable component levels


    

  • R310  PSY  UK83024
       UP12/11/03  P  F211
    • 



Fix is available


    

  • Select the PTF appropriate for your component level.
You will be required to sign in. Distribution on physical
media is not available in all countries.
    








      
              
                            

              

              [{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSZJXP","label":"DB2 Tools for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.1.0"}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            17 March 2021
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback