IJ58390: UNABLE TO CREATE KEYPAIRGENERATOR INSTANCE FOR RSAPSS ALGORITHM USING OID.

APAR status

• Closed as program error.

Error description

• Error Message: no such algorithm: 1.2.840.113549.1.1.10
  .
  Stack Trace: java.security.NoSuchAlgorithmException: no such
  algorithm: 1.2.840.113549.1.1.10
          at
  sun.security.jca.GetInstance.getService(GetInstance.java:99)
          at
  sun.security.jca.GetInstance.getInstance(GetInstance.java:218)
          at
  java.security.KeyPairGenerator.getInstance(KeyPairGenerator.java
  :290)
  .
  

Local fix

Problem summary

• Unable to create KeyPairGenerator instance for RSAPSS algorithm
  using OID.
  

Problem conclusion

• KeyPairGenerator instance for RSAPSS can now be created using
  OID for IBMJCE, IBMJCEPlus and IBMJCEPlusFIPS providers.
  OID for RSAPSS algorithm can be mentioned as
  1.2.840.113549.1.1.10 or OID.1.2.840.113549.1.1.10
  Binary affected -
  -- IBMJCE - ibmjceprovider.jar
  -- IBMJCEPlus - ibmjceplus.jar
  -- IBMJCEPlusFIPS - ibmjceplus.jar
  GIT Issue -
  IBMJCE - #355
  IBMJCEPlus - #1025
  RTC - 154031
  Build -
  ibmjceprovider.jar - 8.0 build_20260424-666
  ibmjceplus.jar(IBMJCEPlus) - 8.0 build_20260424-664-b89c9c73
  ibmjceplus.jar(IBMJCEPlusFIPS) - 8.0 build_20260424-665-df5928bd
  JVM to be delivered in - JDK 8 SR8FP70
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
  IBM SDK, Java Technology Edition
     8    SR8 FP70  (8.0.8.70)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
    - IBM Semeru Runtimes, Version 11 and later
      https://www.ibm.com/semeru-runtimes/downloads/
    - IBM SDK, Java Technology Edition, Version 8
      https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels