PI74494: IBM RATIONAL DEVELOPER FOR Z (RDZ) HCE DOES NOT SUPPORT TLS 1.2

Rational Developer for System z Fix Pack 5 (9.5.1.6) for 9.5.1.
Rational Developer for z Systems Fix Pack 7 (9.5.1.7) for 9.5.1.
Rational Developer for z Systems Fix Pack 8 (9.5.1.8) for 9.5.1.
Rational Developer for z Systems Fix Pack 9 (9.5.1.9) for 9.5.1.
Rational Developer for z Systems Fix Pack 10 (9.5.1.10) for 9.5.1.
Rational Developer for z Systems Fix Pack 11 (9.5.1.11) for 9.5.1.
Rational Developer for z Systems Fix Pack 12 (9.5.1.12) for 9.5.1.

APAR status

• Closed as program error.

Error description

• IBM Rational Developer for z (RDz / IDz) Host Connection
  Emulator (HCE) does not support TLS 1.2 with MS-CAPI
  
  When you select to connect using HCE you have the option of
  choosing SSL > TLS.
  
  The two sides then negotiate the version to use for the session
  and the supported ciphers.
  
  The underlying code used by the HCE does not provide TLS 1.2
  with MS-CAPI.
  

Local fix

• Use JKS connection instead of MS-CAPI.
  
  This APAR provided the ability to use a JKS for TLS v1.2 in the
  RDz client v9.5.1.2:
  http://www-01.ibm.com/support/docview.wss?uid=swg1PI67476
  

Problem summary

• See error description.
  

Problem conclusion

• The problem listed in this APAR has been resolved with
  IBM Rational Developer for z Systems V9.5.1.6 Fix Pack which
  is available from the Recommended Fixes support download page:
  http://www-1.ibm.com/support/docview.wss?rs=2294&uid=swg27006335
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DEV FOR Z SYS

• Fixed component ID

  5724T0700

Applicable component levels

• R951 PSY

     UP