bcpg-jdk18on and bcprov-jdk18on not compatible with IBM WebSphere path 8.5.5.27

[rupinder183]

Hi,

We are using bcpg-jdk18on-1.80.jar and bcprov-jdk18on-1.80.jar in our java project which is runs on IBM WebSphere application server. However, when we recently applied patch 8.5.5.27 to our WAS-v8.5.5.*, we got into multiple issues. For one issue, we are getting following error in our startup up logs and application logs. Please help.

[3/3/25 7:08:39:848 CST] 00000023 ORBRas E com.ibm.ws.security.orbssl.WSSSLClientSocketFactoryImpl createSSLSocket Thread-5 JSSL0120E: javax.net.ssl.SSLException: Indicates some kind of error detected by an SSL subsystem. Reason: java.lang.ClassCastException: org.bouncycastle.jcajce.provider.asymmetric.edec.BCXDHPublicKey incompatible with ibm.security.internal.interfaces.XECPublicKey javax.net.ssl.SSLException: java.lang.ClassCastException: org.bouncycastle.jcajce.provider.asymmetric.edec.BCXDHPublicKey incompatible with ibm.security.internal.interfaces.XECPublicKey
at com.ibm.jsse2.f.a(f.java:58)
at com.ibm.jsse2.be.a(be.java:4)
at com.ibm.jsse2.be.a(be.java:56)
at com.ibm.jsse2.be.a(be.java:97)
at com.ibm.jsse2.bn.a(bn.java:453)
at com.ibm.jsse2.bn.a(bn.java:388)
at com.ibm.jsse2.bn.startHandshake(bn.java:232)
at com.ibm.ws.security.orbssl.WSSSLClientSocketFactoryImpl.performSSLHandshakeAndGetSession(WSSSLClientSocketFactoryImpl.java:464)
at com.ibm.ws.security.orbssl.WSSSLClientSocketFactoryImpl.createSSLSocket(WSSSLClientSocketFactoryImpl.java:211)
at com.ibm.ws.orbimpl.transport.WSSSLTransportConnection.createSocket(WSSSLTransportConnection.java:236)
at com.ibm.ws.orbimpl.transport.WSSSLTransportConnection.createSocket(WSSSLTransportConnection.java:315)
at com.ibm.CORBA.transport.TransportConnectionBase.connect(TransportConnectionBase.java:375)
at com.ibm.ws.orbimpl.transport.WSTransport$1.run(WSTransport.java:503)
at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118)
at com.ibm.ws.orbimpl.transport.WSTransport.getConnection(WSTransport.java:500)
at com.ibm.CORBA.transport.TransportBase.getConnection(TransportBase.java:182)
at com.ibm.rmi.iiop.TransportManager.get(TransportManager.java:98)
at com.ibm.rmi.iiop.GIOPImpl.getConnection(GIOPImpl.java:134)
at com.ibm.rmi.iiop.GIOPImpl.createRequest(GIOPImpl.java:181)
at com.ibm.rmi.corba.ClientDelegate._createRequest(ClientDelegate.java:1767)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1050)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1129)
at com.ibm.CORBA.iiop.ClientDelegate.createRequest(ClientDelegate.java:1514)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1028)
at com.ibm.CORBA.iiop.ClientDelegate.createRequest(ClientDelegate.java:1480)
at com.ibm.rmi.corba.ClientDelegate.request(ClientDelegate.java:1658)
at com.ibm.CORBA.iiop.ClientDelegate.request(ClientDelegate.java:1436)
at org.omg.CORBA.portable.ObjectImpl._request(ObjectImpl.java:458)
at com.ibm.ws.orb.services.lsd._LocationServiceStub.unregister_server(_LocationServiceStub.java:76)
at com.ibm.ejs.oa.LocationService$2.run(LocationService.java:215)
at com.ibm.ws.security.auth.ContextManagerImpl.runAs(ContextManagerImpl.java:5568)
at com.ibm.ws.security.auth.ContextManagerImpl.runAsSystem(ContextManagerImpl.java:5694)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:90)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:508)
at com.ibm.ejs.oa.LocationService.runAsSystem(LocationService.java:452)
at com.ibm.ejs.oa.LocationService.invokeUnregisterServer(LocationService.java:220)
at com.ibm.ejs.oa.LocationService.unregister(LocationService.java:197)
at com.ibm.ejs.oa.EJSServerORBImpl.terminate(EJSServerORBImpl.java:205)
at com.ibm.ejs.oa.EJSORB.terminate(EJSORB.java:124)
at com.ibm.ws.runtime.component.ORBImpl.stop(ORBImpl.java:515)
at com.ibm.ws.runtime.component.ContainerHelper.stopComponent(ContainerHelper.java:477)
at com.ibm.ws.runtime.component.ContainerHelper.stopComponents(ContainerHelper.java:461)
at com.ibm.ws.runtime.component.ContainerImpl.stopComponents(ContainerImpl.java:650)
at com.ibm.ws.runtime.component.ContainerImpl.stop(ContainerImpl.java:638)
at com.ibm.ws.runtime.component.ServerImpl.stop(ServerImpl.java:655)
at com.ibm.ws.runtime.component.ServerCollaborator$ShutdownHook$1.run(ServerCollaborator.java:927)
at com.ibm.ws.security.auth.ContextManagerImpl.runAs(ContextManagerImpl.java:5568)
at com.ibm.ws.security.auth.ContextManagerImpl.runAsSystem(ContextManagerImpl.java:5694)
at com.ibm.ws.runtime.component.ServerCollaborator$ShutdownHook.run(ServerCollaborator.java:917)
at com.ibm.ws.runtime.component.ServerCollaborator$ShutdownHook.run(ServerCollaborator.java:887)
Caused by: java.lang.ClassCastException: org.bouncycastle.jcajce.provider.asymmetric.edec.BCXDHPublicKey incompatible with ibm.security.internal.interfaces.XECPublicKey
at com.ibm.jsse2.bg$d.(bg$d.java:28)
at com.ibm.jsse2.l$e.a(l$e.java:1)
at com.ibm.jsse2.l$a.a(l$a.java:13)
at com.ibm.jsse2.l.a(l.java:64)
at com.ibm.jsse2.O$e.a(O$e.java:5)
at com.ibm.jsse2.H$c.a(H$c.java:4)
at com.ibm.jsse2.p.a(p.java:53)
at com.ibm.jsse2.a6$b.a(a6$b.java:14)
at com.ibm.jsse2.p.a(p.java:38)
at com.ibm.jsse2.aa.a(aa.java:5)
at com.ibm.jsse2.aa.a(aa.java:229)
at com.ibm.jsse2.be.a(be.java:229)
at com.ibm.jsse2.a3.a(a3.java:11)
at com.ibm.jsse2.bn.b(bn.java:20)
at com.ibm.jsse2.bn.f(bn.java:426)
at com.ibm.jsse2.bn.a(bn.java:116)
... 46 more