IBM Support

PI46947: WEBSPHERE MQ V7.0.1 ON ZOS: INBOUND CHANNEL USING SSLV3-BASED CIPHERSPECS FAILS TO START.

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • After applying SystemSSL maintenance (including PTFs UA77207 and
UA77208) inbound channels using SSLv3-based CipherSpecs fail to
start. These channels have the MQ switch active that re-enables
SSLv3, and the following errors are generated in CHINIT joblog:

+CSQX635E (Q3X2 CSQXRCTL Invalid cipher specification 01 for
   channel xxxx
+CSQX599E (Q3X2 CSQXRCTL Channel xxxx ended abnormally
This can also be seen when running with UA77675(SUP for UA77207)
and PTF UA77676.

Local fix

  • 



Problem summary


    

  • ****************************************************************
* USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 *
*                 Release 0 Modification 1                     *
****************************************************************
* PROBLEM DESCRIPTION: Following the application of the PTF    *
*                      for SystemSSL APARs OA47405 or OA47976, *
*                      customers attempting to use SSLv3-based *
*                      CiperSpecs may find inbound channels    *
*                      fail to connect.                        *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
Following the application of the PTF for SystemSSL APARs OA47405
or OA47976, customers attempting to use SSLv3-based CiperSpecs,
even after enabling their use, may find inbound channels fail to
connect with message:

  CSQX635E Invalid cipher specification for channel ????.

    



Problem conclusion


    

  • Processing has been amended to ensure that SSLv3 CiperSpecs are
available to be used after being explicitly enabled by
customers.
010Y
CSQXGINI

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    PI46947
    • 

  • Reported component name
    WMQ Z/OS V7
    • 

  • Reported component ID
    5655R3600
    • 

  • Reported release
    010
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2015-08-14
    • 

  • Closed date
    2015-10-15
    • 

  • Last modified date
    2015-12-03
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    
UI32198
    

    • 



Modules/Macros


    

  • CSQXGINI

    



Fix information


    

  • Fixed component name
    WMQ Z/OS V7
    • 

  • Fixed component ID
    5655R3600
    • 



Applicable component levels


    

  • R010  PSY  UI32198
       UP15/11/11  P  F511
    • 



Fix is available


    

  • Select the PTF appropriate for your component level.
You will be required to sign in. Distribution on physical
media is not available in all countries.
    








      
              
                            

              

              [{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0.1","Edition":"","Line of Business":{"code":"","label":""}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            03 December 2015
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback