IT23860: AMQ9777 message contains an SSLPEER value when the channel is not using SSL/TLS

APAR status

• Closed as program error.

Error description

• The AMQ9777 error message outputs the SSLPEER for a channel that
  does not
  have SSL/TLS enabled. The following is an example of what was
  seen in the error message:
  .
  SSLPEER('CN=XXXXX,OU=XXXXX,O=XXXXX')
  

Local fix

• Disregard the inserted SSLPEER value in the message if the
  channel is not using SSL/TLS
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users of MQ with an SSLPEER value defined on channel definition
  which has SSL/TLS disabled for the particular channel.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  If the SSLPEER attribute was set for a channel definition, but
  the channel was not configured to use SSL/TLS (no value
  configured for SSLCIPH), then a logic error in the error message
  routines would insert this in messages such as AMQ9777 which
  take an SSLPEER as an insert. This was incorrect, as the
  inserted SSLPEER should reflect the peer name of the remote end
  of the channel, which will be empty if SSL/TLS is not in use.
  

Problem conclusion

• The programming error has been resolved so that SSLPEER
  information is suppressed when SSL is not enabled for the
  channel.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v7.5       7.5.0.9
  v8.0       8.0.0.10
  v9.0 LTS   9.0.0.4
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ BASE MP

• Fixed component ID

  5724H7251

Applicable component levels