IBM Support

IT34567: Enable Alias and TLS 1.3 Cipherspecs in the MQ Explorer on IBM iand z/OS platforms.

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Alias and TLS 1.3 CipherSpecs are not enabled on on IBM i and
    z/OS platforms in the MQ Explorer
    

Local fix

  • There is no local fix/workaround.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    All users who wish to configure SSL channels, via the MQ
    Explorer to use either Alias or TLS 1.3 CipherSpecs on IBM i and
    z/OS platforms.
    
    
    Platforms affected:
    Windows, Linux on x86-64
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    Alias and TLS 1.3 CipherSpecs are not enabled on IBM i and z/OS
    platforms in the MQ Explorer
    

Problem conclusion

  • The list of CipherSpecs displayed in the SSL Cipher Spec.
    (SSLCIPH) channel property when defining an MQ channel using the
    MQ Explorer has been updated to include Alias and TLS 1.3
    CipherSpecs for IBM i and z/OS platforms.
    
    Following TLS 1.3 CipherSpecs were enabled
    	TLS_AES_128_GCM_SHA256
    	TLS_AES_256_GCM_SHA384
    	TLS_CHACHA20_POLY1305_SHA256
    	
    Following Alias CipherSpecs were enabled
    	ANY
    	ANY_TLS12_OR_HIGHER
    	ANY_TLS13
    	ANY_TLS13_OR_HIGHER	
    	
    An equivalent update for the IBM MQ Console is being made under
    APAR IT35579.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v9.2 LTS   9.2.0.2
    v9.x CD    9.2.2
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT34567

  • Reported component name

    MQ BASE V9.2

  • Reported component ID

    5724H7281

  • Reported release

    920

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-10-16

  • Closed date

    2021-01-25

  • Last modified date

    2021-01-25

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    MQ BASE V9.2

  • Fixed component ID

    5724H7281

Applicable component levels

[{"Line of Business":{"code":"LOB36","label":"IBM Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"920"}]

Document Information

Modified date:
25 March 2021