IBM Support

IT10353: CONFIGURING A WEAK TLS CIPHERSPEC FOR MQV8.0.0.3 IS ALLOWED WITHOUT THE ENVIRONMENT VARIABLE OR THE QM.INI ATTRIBUTE.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Changes made for IBM MQ v8.0.0.3 intended to prevent non-FIPS
    Transport Level Security(TLS) Cipher Specifications from being
    used without an environment variable of
    AMQ_SSL_WEAK_CIPHER_ENABLE being set.
    
    This change was incomplete, correctly preventing channels with
    non-FIPS Cipher Specifications from starting, but still allowing
    non-FIPS TLS Cipher Specifications to be defined on channels
    without error.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    Users of MQ v8.0.0.3 attempting to define or alter a channel to
    use a deprecated cipher specification.
    
    
    Platforms affected:
    MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    MQ 8.0.0.3 contained changes with the intention of checking for
    cipher specification deprecation when a channel was being
    selected defined or altered, as well as checking it at the time
    that the channel is started.
    
    This change was only partially implemented, only preventing the
    channels from starting.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    IT10353

  • Reported component name

    WMQ BASE MULTIP

  • Reported component ID

    5724H7251

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2015-07-27

  • Closed date

    2015-08-27

  • Last modified date

    2015-08-27

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ BASE MULTIP

  • Fixed component ID

    5724H7251

Applicable component levels

  • R800 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.0.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
27 August 2015