IBM Support

IT23860: AMQ9777 message contains an SSLPEER value when the channel is not using SSL/TLS

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • The AMQ9777 error message outputs the SSLPEER for a channel that
    does not
    have SSL/TLS enabled. The following is an example of what was
    seen in the error message:
    .
    SSLPEER('CN=XXXXX,OU=XXXXX,O=XXXXX')
    

Local fix

  • Disregard the inserted SSLPEER value in the message if the
    channel is not using SSL/TLS
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    Users of MQ with an SSLPEER value defined on channel definition
    which has SSL/TLS disabled for the particular channel.
    
    
    Platforms affected:
    MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    If the SSLPEER attribute was set for a channel definition, but
    the channel was not configured to use SSL/TLS (no value
    configured for SSLCIPH), then a logic error in the error message
    routines would insert this in messages such as AMQ9777 which
    take an SSLPEER as an insert. This was incorrect, as the
    inserted SSLPEER should reflect the peer name of the remote end
    of the channel, which will be empty if SSL/TLS is not in use.
    

Problem conclusion

  • The programming error has been resolved so that SSLPEER
    information is suppressed when SSL is not enabled for the
    channel.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v7.5       7.5.0.9
    v8.0       8.0.0.10
    v9.0 LTS   9.0.0.4
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT23860

  • Reported component name

    IBM MQ BASE MP

  • Reported component ID

    5724H7251

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-01-26

  • Closed date

    2018-04-12

  • Last modified date

    2018-04-12

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    IBM MQ BASE MP

  • Fixed component ID

    5724H7251

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.0.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
12 April 2018