PI61595: RATIONAL CHANGE PERL API TRIGGERS NOT WORKING WITH TLSV1.2

Rational Change Interim Fix 8 for 5.3.1.1

APAR status

• Closed as program error.

Error description

• Summary:
  Reproduced with Change 5.3.1.1.06
  -Perl Triggers work with Change + SSL without the TLSv1.2 option
  -Perl triggers DO NOT work with Change + SSL WITH the TLSv1.2
  option
  
  
  Details:
  -Create a simple trigger using the Change Perl API, which simply
  does a connection and display for example the problem_synopsis
  attribute.
  -Add this trigger to a lifecycle in any Post Transition, then
  create a new CR PAckage from this lifecycle and install it.
  
  -Set Change to use SSL without the TLSv1.2 option
  Then transition a CR, using the transition where you added the
  trigger.
  => the trigger fires without any error.
  
  -Set Change to use SSL with the TLSv1.2 option
  Then transition a CR, using the transition where you added the
  trigger.
  => The trigger does not fire.
  
  Instead the event.log shows the error:
  #####
  2016/04/21 14:54:47  Connection failure: The response as a
  string is: 500 (Internal Server Error) SSL negotiation failed:
  2016/04/21 14:54:47  Content-Type: text/plain
  2016/04/21 14:54:47  Client-Date: Thu, 21 Apr 2016 13:54:47 GMT
  2016/04/21 14:54:47  Client-Warning: Internal response
  2016/04/21 14:54:47
  2016/04/21 14:54:47  500 SSL negotiation failed:
  2016/04/21 14:54:47  WARN: Post-transition trigger failed for
  CR c7210#2. Connection failure: The response as a string is: 500
  (Internal Server Error) SSL negotiation failed:
  Content-Type: text/plain
  Client-Date: Thu, 21 Apr 2016 13:54:47 GMT
  Client-Warning: Internal response
  
  500 SSL negotiation failed:
  
  #####
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Perl module if configured in HTTPS mode.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Perl triggers DO NOT work with Change + SSL WITH the TLSv1.2 *
  * option                                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• Changes in code required to include new Perl module is added.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TLOGIC CHANGE

• Fixed component ID

  5724V87CG

Applicable component levels

• R531 PSY

     UP