IBM Semeru Runtime Certified Edition for z/OS 17: Supplementary documentation

Content

The supplementary documentation is updated only if there are notable changes, such as special advisories, in a particular release. This document was last updated during 17.0.10.0 release.

The documentation to support this version is available in IBM Documentation. For links to downloads, fixes, time zone updates, and a table of OpenJDK versions on which this release is based, see IBM Semeru Runtime Certified Edition for z/OS refreshes.

Supplementary information is available for the following code refreshes:

• First release
• 17.0.10.0

17.0.10.0 (March 2024)

Issues seen in the SunPKCS11 provider on z/OS

Certain changes made in the OpenJDK have resulted in changed behavior of the SunPKCS11 provider. The main effect of this change is that any key that is stored in a PKCS11 keystore and accessed using the SunPKCS11 provider will be treated as sensitive, even if their properties don't indicate that they are sensitive. This can cause the return type of the private key to change, for example, in the case of a RSA key, this will change its class from RSAPrivateKey to RSAPrivateKeyInternal. This is a known issue and will be fixed in a future release. Also 'Cancel failed' errors may be seen when canceling some signature operations due to the external change in OpenJDK not specifying the correct key size. This will get cleaned up when the session is closed. This issue will also be fixed in a future release.

First release 17.0.7.0 (August 2023)

Potential degradation in throughput observed

In Java 17, the sockets implementation is updated to use NIOSocketImpl by default. In certain applications, the use of NIOSocketImpl may result in additional pathlength through z/OS OMVS routines, resulting in potential increase in general CP time. The performance gap may be restored with the use of property -Djdk.net.usePlainSocketImpl=true as a workaround. This performance issue will be fixed in a future release.