Technical Blog Post
Abstract
New information messages in the TEPS RAS1 log at FP07
Body
New information messages in the TEPS RAS1 log at FP07
At 6.3 Fp07 there are some new lines in the TEPS RAS1 log at start up and there has been queries about what they mean, they are for cipher types.
This is the <hostname>_cq_*-01.log or <hostname>_cq_KfwServices_*-01.log file depending on the operating system of your TEPS.
The examples below are from different machine types but the messages are the same on Windows and Unix/Linux.
The new lines are after the line KFW_INTERFACES="cnps"
At start up it used just to report this for ciphers:
(598DBC8C.0000-5EC:kbbssge.c,72,"BSS1_GetEnv") KFW_INTERFACES="cnps"
(598DBC8D.0000-5EC:ctserverorb.cpp,964,"CTServerORB::Data::createCipherSuiteInfoList") Adding cipher suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA
(598DBC8D.0001-5EC:ctserverorb.cpp,964,"CTServerORB::Data::createCipherSuiteInfoList") Adding cipher suite: TLS_RSA_WITH_DES_CBC_SHA
(598DBC8D.0002-5EC:ctserverorb.cpp,964,"CTServerORB::Data::createCipherSuiteInfoList") Adding cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA
(598DBC8D.0003-5EC:ctserverorb.cpp,964,"CTServerORB::Data::createCipherSuiteInfoList") Adding cipher suite: TLS_RSA_WITH_AES_128_CBC_SHA
(598DBC8D.0004-5EC:kbbssge.c,72,"BSS1_GetEnv") KGL_MSG2_EVENTLOG="FORMAT C:\IBM\ITM\logs\kfwservices.msg"
It now reports this:
(59A91CD6.0001-1:kbbssge.c,72,"BSS1_GetEnv") KFW_INTERFACES="cnps"
(59A91CD6.003B-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.003C-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.003D-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.003E-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.003F-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.0040-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.0041-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.0042-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.0043-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.0044-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.0045-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.0046-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.0047-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDH_RSA_WITH_AES_256_GCM_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.0048-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDH_RSA_WITH_AES_128_GCM_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.0049-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDH_RSA_WITH_AES_256_CBC_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.004A-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_ECDH_RSA_WITH_AES_128_CBC_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.004B-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_RSA_WITH_AES_256_GCM_SHA_384 is not recognized as a supported ciphersuite
(59A91CD6.004C-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_RSA_WITH_AES_128_GCM_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.004D-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_RSA_WITH_AES_256_CBC_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.004E-1:ctserverorb.cpp,956,"CTServerORB::Data::createCipherSuiteInfoList") TLS_RSA_WITH_AES_128_CBC_SHA_256 is not recognized as a supported ciphersuite
(59A91CD6.004F-1:ctserverorb.cpp,963,"CTServerORB::Data::createCipherSuiteInfoList") Adding cipher suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA
(59A91CD6.0050-1:ctserverorb.cpp,963,"CTServerORB::Data::createCipherSuiteInfoList") Adding cipher suite: TLS_RSA_WITH_DES_CBC_SHA
(59A91CD6.0051-1:ctserverorb.cpp,963,"CTServerORB::Data::createCipherSuiteInfoList") Adding cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA
(59A91CD6.0052-1:ctserverorb.cpp,963,"CTServerORB::Data::createCipherSuiteInfoList") Adding cipher suite: TLS_RSA_WITH_AES_128_CBC_SHA
(59A91CD6.0058-1:kbbssge.c,72,"BSS1_GetEnv") KGL_MSG2_EVENTLOG="FORMAT /opt/IBM/ITM/logs/kfwservices.msg"
These are new ciphers that have been added but the messages are informational only.
These messages are reporting the various ciphers that are not currently supported by the underlying CORBA infrastructure used by the TEPS.
Therefore these extra lines can be ignored.
UID
ibm11083801