JDK 'java.security.Security' Package Causing Poor Performance on AIX (Doc ID 297602.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Containers for J2EE - Version 9.0.3.0.0 to 10.1.2.0.0 [Release 9iAS to AS10gR2]
z*OBSOLETE: IBM AIX 4.3 Based Systems (64-bit)
***Checked for relevance on 08-Aug-2013***

IBM AIX 4.3 Based Systems (64-bit)
AIX 4.3 Based Systems (64-bit)
Secure JSP applications
IBM’s AIX 5L Based Systems (64 bit)
Oracle Application Server 9.0.4.0.0
JDK 1.4.1


Symptoms

Every time Oracle’s HTTPClient opens an SSL socket, the java.security.Security.getAlgClassName()
is unzipping a JAR file. This is resulting in higher than expected CPU cycles and slower performance.

SUN’s JDK 1.4.1 src for java.security.Security class does not contain the getAlgClassName method.

Looking at the java.security configuration file on AIX, the file shows:

security.provider.1=sun.security.provider.Sun
security.provider.2=com.sun.net.ssl.internal.ssl.Provider
security.provider.3=com.ibm.jsse.IBMJSSEProvider
security.provider.4=com.ibm.crypto.provider.IBMJCE
security.provider.5=com.ibm.security.jgss.IBMJGSSProvider
security.provider.6=com.ibm.security.cert.IBMCertPath

The sun.security.provider.Sun is not included in the IBM runtime jar.
If the sun.security.provider.Sun entry is removed from the java.security,
CPU performance increases (45.44% CPU) when compared to the 62.42% CPU before the change.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms