IC81564: ENABLING "PERMIT CONNECTIONS TO INSECURE SSL SERVERS" FROM SERVICE OBJECT MIGHT REVERT TO DISABLED

APAR status

• Closed as program error.

Error description

• In firmware 4.0.x, when you set 'Permit Connections to
  insecure SSL Servers' to ON
  from a service object (for example, a MultiProtocol Gateway
  configuration
  page), it can revert back to OFF, after you apply the change.
  
  To make sure this option is enabled, browse Objects -> Crypto
  Configuration -> SSL Proxy Profile -> MySSLProxy and verify
  this option is set to ON.
  
  As an alternative you can use the CLI to check if this setting
  is enabled:
  
  show sslproxy mySSLProxy
  

Local fix

• Set option via the Objects menu or CLI
  

Problem summary

• The value for 'Permit Connections to Insecure
  SSL Server' in the MPGW or WAG Task Template may be incorrect if
  there are multiple SSL Proxy Profiles associated with this
  service.  This condition would occur if, for example, an HTTPS
  FSH is configured for the service.  In this case, the value
  displayed for the field might be that of the SSL Proxy
  Profile associated with the HTTPS FSH rather than the value
  of the SSL Proxy Profile of the service.
  
  This fix ensures that the value being displayed for this field
  is that of the SSL Proxy Profile directly associated with the
  service.
  

Problem conclusion

• The fix is available in 4.0.1.10 and 4.0.2.6
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R401 PSY

     UP

• R402 PSY

     UP

• R500 PSY

     UP