Release Notes

ManualsBrandsDell ManualsBSAFEBSAFE SSL-J

Release Notes

17.12.19

RSA BSAFE

SSL-J 6.2.6 Release Notes

This document summarizes the features of RSA BSAFE SSL-J 6.2.6 (SSL-J). It

outlines the new features, platform information, and resolved and known issues.

Note: All SSLJ APIs are deprecated. The APIs are available for use, and will

be removed at some future time. RSA recommends replacing the SSLJ APIs

with the public JSSE API and the Certificate API in RSA BSAFE Crypto-J

(Crypto-J).

Contents:

New Features ................................................................................................... 2

Changes ............................................................................................................ 2

Related Products .............................................................................................. 2

FIPS 140-2 Status ............................................................................................ 3

Operating Environment Information .............................................................. 4

Primary Operating Environments ............................................................ 4

Secondary Operating Environments ...................................................... 7

Tested JDK Update Versions ................................................................ 10

Discontinued Platforms .......................................................................... 11

Algorithms and Key Sizes ............................................................................. 11

Interoperability ................................................................................................ 12

Cipher Suites .................................................................................................. 14

Enhancements and Resolved Issues .......................................................... 19

Known Issues ................................................................................................. 19

Documentation ............................................................................................... 20

Support and Service ...................................................................................... 22

Summary of content (22 pages)

PAGE 1
Release Notes 17.12.19 RSA BSAFE® SSL-J 6.2.6 Release Notes This document summarizes the features of RSA BSAFE SSL-J 6.2.6 (SSL-J). It outlines the new features, platform information, and resolved and known issues. Note: All SSLJ APIs are deprecated. The APIs are available for use, and will be removed at some future time. RSA recommends replacing the SSLJ APIs with the public JSSE API and the Certificate API in RSA BSAFE Crypto-J (Crypto-J). Contents: New Features ........................................
PAGE 2
RSA BSAFE SSL-J 6.2.6 Release Notes New Features This release of SSL-J is designed to provide the following new feature. • Added support for the standard JDK security property jdk.certpath.disabledAlgorithms. Changes This release of SSL-J is designed to include fixes for specific issues. For more information, see Enhancements and Resolved Issues. Related Products This release of SSL-J must be used with: • Crypto-J 6.2.5, which includes the FIPS 140 validated Java Cryptographic Module (JCM).
PAGE 3
RSA BSAFE SSL-J 6.2.6 Release Notes FIPS 140-2 Status FIPS 140-2 (Federal Information Processing Standards Publication 140-2 - Security Requirements for Cryptographic Modules) details the United States Government requirements for cryptographic modules. For more information about the FIPS 140-2 standard and validation program, see the FIPS 140-2 page on the NIST Web site.
PAGE 4
RSA BSAFE SSL-J 6.2.6 Release Notes Operating Environment Information Operating environment support for SSL-J is separated into two categories: • Primary Operating Environments: SSL-J is designed and tested to support these operating environments at the time of release. • Secondary Operating Environments: these operating environments are not tested with this release. These operating environments are expected to work, but support is not guaranteed.
PAGE 5
RSA BSAFE SSL-J 6.2.6 Release Notes Table 1 Primary Operating Environment Information (continued) CPU Architecture CPU Size Compiler Version Android™ 9.0 ARM® v8-A 64-bit Android SDK 28 Android 8.x ARM v8 64-bit Android SDK 26, 27 ARM v8 32-bit ARM v7 32-bit x86 32-bit ARM v8 64-bit ARM v8 32-bit ARM v7 32-bit x86 32-bit PowerPC® 64-bit PowerPC 32-bit x86_64 64-bit IBM JDK 8.0 OpenJDK 8u Oracle JDK 8.0, 9.0.1 Windows® 10 Enterprise x86_64 64-bit IBM JDK 8.0 Oracle JDK 8.
PAGE 6
RSA BSAFE SSL-J 6.2.6 Release Notes Table 1 Primary Operating Environment Information (continued) CPU Architecture CPU Size Windows Server 2008 SP2 x86_64 64-bit IBM JDK. 8.0 Oracle JDK 8.0 Windows Server 2008 (SSLF configuration) x86_64 64-bit IBM JDK 8.0 Oracle JDK 8.0 SPARC® v9 64-bit IBM JDK 8.0 Oracle JDK 8.0, 9.0.1 x86_64 64-bit Oracle JDK8.0 SPARC v9 64-bit IBM JDK 8.0 Oracle JDK 8.0 x86_64 64-bit Oracle JDK8.0 x86_64 64-bit IBM JDK 8.0 OpenJDK 8u Oracle JDK 8.0, 9.0.
PAGE 7
RSA BSAFE SSL-J 6.2.6 Release Notes Secondary Operating Environments The following table lists the secondary operating environments which are not tested with this release, but can be requested through RSA Customer Support. Table 2 Secondary Operating Environment Information CPU Architecture CPU Size JVM x86_64 64-bit Apple JDK 7.0 x86 32-bit x86_64 64-bit IBM JDK 7.0, 7.1 OpenJDK 7u Oracle JDK 7.0 x86 32-bit IBM JDK 7.0, 7.1 OpenJDK 7u Oracle JDK 7.0, 9.01 (EA) CentOS 7.
PAGE 8
RSA BSAFE SSL-J 6.2.6 Release Notes Table 2 Secondary Operating Environment Information (continued) Operating System CPU Architecture CPU Size JVM ARM v7 32-bit Android SDK 19 x86 32-bit Itanium® 2 64-bit Google (continued) Android 4.4.x HPE HP-UX 11.31 HP JDK 7.0, 8.0 32-bit IBM AIX 7.2 PowerPC 64-bit IBM JDK 7.0, 7.1 32-bit AIX 7.1 PowerPC 64-bit IBM JDK 7.0, 7.1, 8.0 32-bit AIX 6.1 PowerPC 64-bit IBM JDK 7.0, 8.
PAGE 9
RSA BSAFE SSL-J 6.2.6 Release Notes Table 2 Secondary Operating Environment Information (continued) CPU Architecture CPU Size Windows Server 2012 R2 x86_64 64-bit IBM JDK.7.0, 7.1 Oracle JDK 7.0 Windows Server 2012 x86_64 64-bit IBM JDK.7.0, 7.1 Oracle JDK 7.0, 9.0.1 Windows Server 2008 SP2 x86_64 64-bit IBM JDK.7.0, 7.1 Oracle JDK 7.0, 9.0.1 x86 32-bit IBM JDK.7.0, 7.1, 8.0 Oracle JDK 7.0, 8.0 x86_64 64-bit IBM JDK.7.0, 7.1 Oracle JDK 7.0 x86 32-bit IBM JDK.7.0, 7.1 Oracle JDK 7.
PAGE 10
RSA BSAFE SSL-J 6.2.6 Release Notes Tested JDK Update Versions The following table lists the supported primary platforms and operating systems, with the tested JDK update version. Table 3 Tested JDK Update Versions Operating System CPU Compiler Version Apple Mac OS X 10.11+ All Apple JDK 8.0 1.8.0_121. Canonical Ubuntu 16.04 Server 64-bit IBM JDK 1.8.0_201 OpenJDK 1.8.0_191 Oracle JDK 1.8.0_74 32-bit IBM JDK 1.8.0_201 OpenJDK 1.8.0_121 Oracle JDK 1.8.
PAGE 11
RSA BSAFE SSL-J 6.2.6 Release Notes In the next release of SSL-J, RSA might discontinue support for any of the Secondary Operating Environments. For subsequent releases of SSL-J going forward, where a vendor discontinues mainstream support for an operating system and platform combination, RSA discontinues support from the same date. Algorithms and Key Sizes For the supported algorithms and key sizes, see “Algorithms and Key Sizes” in the RSA BSAFE Crypto-J Release Notes.
PAGE 12
RSA BSAFE SSL-J 6.2.6 Release Notes Interoperability Note: Interoperability was not specifically tested for this release of SSL-J. While it is expected that the versions of the vendor products listed in the following tables will work with this release of SSL-J, interoperability is not guaranteed. SSL-J operates on the application servers on the platforms shown below: Table 4 Application Server Interoperability Application Server Platforms Apache™ Tomcat™ • 8.5 • 7.0.
PAGE 13
RSA BSAFE SSL-J 6.2.6 Release Notes SSL-J has been tested with Crypto-J under the following conditions: • JCE and JCE FIPS: – dynamic loading – static loading. The following table lists the vendor products that have been tested and interoperate with SSL-J: Table 5 Interoperability Vendor Product Interoperability Product Version Apple Safari® 11.1.2 Google Chrome® 75 SSL-J 6.2 Crypto-J 6.2.5 RSA BSAFE Micro Edition Suite 4.1 and 4.
PAGE 14
RSA BSAFE SSL-J 6.2.6 Release Notes Cipher Suites The following table details the supported cipher suites in this release of SSL-J. • The Default column indicates whether the suite is enabled by default. • The SuiteB column indicates whether the suite is available when operating in a Suite B mode. • The SSL and TLS columns indicate whether the suite is available when using the relevant version of SSL or TLS.
PAGE 15
RSA BSAFE SSL-J 6.2.6 Release Notes SuiteB SSLv3 TLSv1 TLSv1.1 TLSv1.
PAGE 16
RSA BSAFE SSL-J 6.2.6 Release Notes The following table details the supported cipher suites in this release of SSL-J which have been deprecated and will be removed at some future time. • The FIPS column indicates whether the suite is available when operating in FIPS140_SSL_MODE. • The SuiteB column indicates whether the suite is available when operating in a Suite B mode. • The SSL and TLS columns indicate whether the suite is available when using the relevant version of SSL or TLS.
PAGE 17
RSA BSAFE SSL-J 6.2.6 Release Notes SuiteB SSLv3 TLSv1 TLSv1.1 TLSv1.
PAGE 18
RSA BSAFE SSL-J 6.2.6 Release Notes SuiteB SSLv3 TLSv1 TLSv1.1 TLSv1.
PAGE 19
RSA BSAFE SSL-J 6.2.6 Release Notes Enhancements and Resolved Issues The following table lists the enhancements and resolved issues in this release of SSL-J: Table 8 Enhancements and Resolved Issue in SSL-J 6.2.6 ID Description BSFSSLJ-504 Add support for JDK properties to configure the CertPath algorithm. BSFSSLJ-464 Implement X509ExtendedTrustManager. Known Issues The following table lists the known issues in this release of SSL-J.
PAGE 20
RSA BSAFE SSL-J 6.2.6 Release Notes Documentation The SSL-J documentation suite includes: • This document, the RSA BSAFE SSL-J Release Notes, in Portable Document Format (PDF), with the latest information on SSL-J. • RSA BSAFE SSL-J Installation Guide, in PDF, with instructions on how to install and build SSL-J.
PAGE 21
RSA BSAFE SSL-J 6.2.6 Release Notes Documentation – RSA BSAFE Crypto-J JSAFE and JCE Software Module 6.2.5 Security Policy documents, Level 1 and Level 2, in PDF, which describes how the Crypto-J JSAFE and JCE Software Module meets the Level 1 security requirements of FIPS 140-2, the Level 2 security requirements of FIPS 140-2 for Roles, Authentication and Services, and the Level 3 security requirements for Design Assurance, and how to securely operate it.
PAGE 22
RSA BSAFE SSL-J 6.2.6 Release Notes Support and Service Access community and support information for your RSA BSAFE products on RSA Link. RSA Link offers a knowledge base containing answers to common questions and solutions to known problems, product documentation, community discussions, and case management. Customers can also open support cases by sending an email to support@rsa.com.