IBM Support

IC88494: ALLOW THE SPECIFICATION OF NEW CIPHER SPECS AVAILABLE FOR V7.1 Z/OS QUEUE MANAGERS IN IBM WEBSPHERE MQ EXPLORER

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • New cipher specifications are available for V7.1 z/OS queue
    managers, introduced by APAR PM77341. The IBM WebSphere MQ
    Explorer needs to be altered to allow these cipher
    specifications to be configured within the channel
    properties. The new cipher specifications are:
    
    TLS_RSA_WITH_AES_256_CBC_SHA256
    TLS_RSA_WITH_AES_128_CBC_SHA256
    TLS_RSA_WITH_NULL_SHA256
    ECDHE_ECDSA_AES_128_CBC_SHA256
    ECDHE_ECDSA_AES_256_CBC_SHA384
    ECDHE_RSA_AES_128_CBC_SHA256
    ECDHE_RSA_AES_256_CBC_SHA384
    
    These cipher specifications are already available for queue
    managers running on distributed platforms.
    

Local fix

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    Users of the IBM WebSphere MQ Explorer configuring z/OS 7.1
    queue managers who require the ability to set one of the
    above cipher specifications.
    
    Platforms affected:
    All Distributed (iSeries, all Unix and Windows) +Java +Java zOS
    ****************************************************************
    PROBLEM SUMMARY:
    The IBM WebSphere MQ Explorer filters its list of ciphers
    according to the queue manager you have connected to, based on
    its platform and command level. This logic prevents the above
    cipher specifications from being displayed for z/OS V7.1 queue
    managers because they were not previously applicable.
    

Problem conclusion

  • The filter logic has been altered to display the above cipher
    specifications when connected to a z/OS V7.1 queue manager.
    
    APAR PM77341 must be applied to the z/OS V7.1 queue manager in
    order for the new cipher specifications to be successfully
    applied to the queue manager configuration. Without this APAR
    the WebSphere MQ Explorer will display the following error:
    
    Error applying changes from page "SSL"
    
    Reason:
    The value of one of the properties specified is not valid. The
    request was not processed. (AMQ4126)
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following:
    
                       v7.0
    Platform           Fix Pack 7.0.1.10
    --------           --------------------
    Windows            U200352
    AIX                U853055
    HP-UX (PA-RISC)    U853082
    HP-UX (Itanium)    U853087
    Solaris (SPARC)    U853083
    Solaris (x86-64)   U853089
    iSeries            7.0.1.10
    Linux (x86)        U853084
    Linux (x86-64)     U853088
    Linux (zSeries)    U853085
    Linux (Power)      U853086
    zOS                7.0.1.10
    
                       v7.1
    Platform           Fix Pack 7.1.0.3
    --------           --------------------
    Windows            7.1.0.3
    AIX                7.1.0.3
    HP-UX (Itanium)    7.1.0.3
    Solaris (SPARC)    7.1.0.3
    Solaris (x86-64)   7.1.0.3
    iSeries            7.1.0.3
    Linux (x86)        7.1.0.3
    Linux (x86-64)     7.1.0.3
    Linux (zSeries)    7.1.0.3
    Linux (Power)      7.1.0.3
    zOS                7.1.0.3
    
    Version            v7.5
    --------           --------------------
    Fix available in:  7.5.0.2
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC88494

  • Reported component name

    WMQ WINDOWS V7

  • Reported component ID

    5724H7220

  • Reported release

    701

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-11-22

  • Closed date

    2013-01-09

  • Last modified date

    2013-07-08

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ WINDOWS V7

  • Fixed component ID

    5724H7220

Applicable component levels

  • R701 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCPQ63","label":"APAR \/ Maintenance"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
08 July 2013