PH71032: IBMJCEHYBRID ERROR CREATING KEY ENTRY BECAUSE DSA AND DH KEYS WERE NOT SUPPORTED.

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: Exception = java.lang.ClassCastException Source =
  com.ibm.ws.ssl.config.SSLConfigManager probeid =
  initializeServerSSL Stack Dump = java.lang.ClassCastException:
  com.ibm.crypto.provider.ECPrivateKey incompatible with
  java.security.interfaces.RSAPrivateKey at
  com.ibm.crypto.ibmjcehybrid.provider.HybridRACFPrivateKey.getAlg
  orithm(HybridRACFPrivateKey.java:650) at
  com.ibm.jsse2.br.<init>(br.java:90) at
  com.ibm.jsse2.bi$a.engineInit(bi$a.java:3) at
  javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:16)
  at
  com.ibm.ws.ssl.provider.AbstractJSSEProvider.getWSKeyManager(Abs
  tractJSSEProvider.java:509) at
  com.ibm.ws.ssl.provider.AbstractJSSEProvider.getSSLContext(Abstr
  actJSSEProvider.java:264) at
  com.ibm.ws.ssl.provider.AbstractJSSEProvider.setServerDefaultSSL
  Context(AbstractJSSEProvider.java:852) at
  com.ibm.ws.ssl.config.SSLConfigManager.setDefaultSSLContext(SSLC
  onfigManager.java:252) at
  com.ibm.ws.ssl.config.SSLConfigManager.initializeSSL(SSLConfigMa
  nager.java:172) at
  com.ibm.ws.ssl.internal.SSLComponent.processConfig(SSLComponent.
  java:337) at
  com.ibm.ws.ssl.internal.SSLComponent.addKeyStores(SSLComponent.j
  ava:231) at
  com.ibm.ws.ssl.internal.SSLComponent.setRepertoire(SSLComponent.
  java:251) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
  Method) at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:90) at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:55) at
  java.lang.reflect.Method.invoke(Method.java:508) at
  org.apache.felix.scr.impl.inject.methods.BaseMethod.invokeMethod
  (BaseMethod.java:257)
  .
  

Local fix

Problem summary

• IBMJCEHYBRID Error creating key entry because DSA and DH keys
  were not supported.
  

Problem conclusion

• Fix needed to be added for keys to route properly.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
  IBM SDK, Java Technology Edition
     8    SR8 FP70  (8.0.8.70)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels