IC54164: PCOM: NOT ABLE TO ESTABLISH A TELNET SSL CONNECTION ON WINDOWS VISTA O.S.

Personal Communications 5.9.7
Personal Communications 5.9.6

APAR status

• Closed as program error.

Error description

• Customer running PCOM5.9.1 on Windows O.S. Vista and they're
  not able to establish a TN3270 connection.  The following error
  appears "The client and server can't communicate because they do
  do not possess a common algorithm.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of Telnet3270 secure connection using  *
  *                 Microsoft CryptoAPI (MSCAPI) as security     *
  *                 package.                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: User not able to establish a SSL        *
  *                      connection using MSCAPI on Windows      *
  *                      VISTA but has no problem using          *
  *                      GSKit.                                  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Microsoft Windows Vista has made changes to MSCAPI module
  Secure32.dll. Now the AcquireCredentialsHandle() API fails
  with error SEC_E_ALGORITHM_MISMATCH which means "The client
  and server cannot communicate, because they do not possess a
  common algorithm."
  

Problem conclusion

• PCSMSSEC.DLL has been changed to set the default values for
  members in SCHANNEL_CRED structure and to verify the server
  Certificate Authority as "trusted" by setting the flag to
  SCH_CRED_MANUAL_CRED_VALIDATION in SCHANNEL_CRED structure for
  Windows VISTA operating systems.
  

Temporary fix

• pcsmssec.dll
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• PCSMSSEC
  

Fix information

• Fixed component name

  PCOMM V5 COMBO-

• Fixed component ID

  5639I7000

Applicable component levels