IJ40137: 8217633: CONFIGURABLE EXTENSIONS WITH SYSTEM PROPERTIES

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Configuring Default Extensions
  Some TLS implementations may not handle unknown extensions
  properly. As a result, you might encounter unexpected
  interoperability issues when the JDK introduces new extensions.
  Two system properties enable you to customize default
  extensions:
  jdk.tls.client.disableExtensions: Blocks extensions used on the
  client side. jdk.tls.server.disableExtensions: Blocks extensions
  used on the server side.
  If an extension is disabled, then it won't be produced nor
  processed in handshake messages.
  The value of these system properties is a list of
  comma-separated standard TLS extension names. See Transport
  Layer Security (TLS) Extensions for a list of these names.
  Extension names are case-sensitive, and unknown, unsupported
  misspelled and duplicated names are ignored.
  Note: Although system properties exist that enable and disable
  specific TLS extensions, such as jsse.enableMFLNExtension,
  jsse.enableSNIExtension, and jsse.enableSNIExtension, an
  extension won't be enabled if it's disabled through
  jdk.tls.client.disableExtensions or
  jdk.tls.server.disableExtensions, even though it could be
  enabled though the corresponding system property.
  

Problem conclusion

• Binary affected - ibmjsseprovider2.jar
  GIT Issue - #197
  RTC - 146933
  Build - 8.0 build_20220126--457
  The fix was delivered for: Java 8.0 SR7 FP10
  .
  This APAR will be fixed in the following Releases:
  .
  IBM SDK, Java Technology Edition
     8    SR7 FP10  (8.0.7.10)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  maintenance can be found at:
             https://www.ibm.com/support/pages/java-sdk
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels