Difference between revisions of "IBM Content Manager OnDemand v10.5.0.7 and GSKit support for Post-Quantum Cryptography"

Jump to navigation Jump to search
m
Corrected version number
(Added note about IBM CMOD Client key database.)
m (Corrected version number)
Line 10: Line 10:


== Changes ==
== Changes ==
If you attempt to use recent FixPacks (v8.0.55.26 or v8.0.55.31) of the IBM GSKit with Content Manager OnDemand v10.5, you MAY encounter frustrating issues relating to configuring CMOD to use SSL/TLS certificates.   
If you attempt to use recent FixPacks (v8.0.55.28 or v8.0.55.31) of the IBM GSKit with Content Manager OnDemand v10.5, you MAY encounter frustrating issues relating to configuring CMOD to use SSL/TLS certificates.   


These are due to the addition of PQC methods, and, unfortunately, a poor decision to enable these methods by default (without notifying end users) and making no updates to the available documentation.
These are due to the addition of PQC methods, and, unfortunately, a poor decision to enable these methods by default (without notifying end users) and making no updates to the available documentation.


; What has changed?
; What has changed?
: Starting in GSKit version AFTER 8.0.55.26, any NEW key databases (.kdb) that are created are protected by PQC methods.
: Starting in GSKit version AFTER 8.0.55.28, any NEW key databases (.kdb) that are created are protected by PQC methods.


; What's the problem?
; What's the problem?

Navigation menu