JDK-8041142 : Re-enabling CBC_PAD PKCS11 mechanisms for Solaris
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.crypto:pkcs11
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: solaris_10,solaris_11
  • Submitted: 2014-04-18
  • Updated: 2017-02-07
  • Resolved: 2014-06-03
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8 JDK 9
8u40Fixed 9 b17Fixed
Description
The following mechanisms are disabled in the sunpkcs11-solaris.cfg file: 

# the following mechanisms are disabled to ensure backward compatibility
# (Solaris bug 6545046)
  CKM_DES_CBC_PAD
  CKM_DES3_CBC_PAD
  CKM_AES_CBC_PAD

Solaris bug 6545046 has been fixed in Solaris 11 but not yet backported to Solaris 10. This fix would be contingent on that being backported to Solaris 10.
Comments
Solaris sparc patch: 150400-14 Solaris x86 patch: 150401-14
20-08-2014
Hi Antheny, Have you got the patch number? Thanks Kevin
30-06-2014
Can you tell the patch number for this fix in Solaris? jce/Global/Cipher/PKCS5Padding have error in JDK9 for this reason. Thanks Kevin
05-06-2014
This is the bug that originally prompted the CBC_PAD mechanisms to be disabled.
03-06-2014