IT37283: MQ channels running with TLS 1.3 cipherspecs intermittently fails with FDC CO373099 from cciTcpSslResetCallback

APAR status

• Closed as program error.

Error description

• MQ channels running with TLS 1.3 cipherspecs(e.g.
  TLS_AES_256_GCM_SHA384) intermittently fails with the
  following failure data capture (FDC) record.
  
  Probe Id          :- CO373099
  Component         :- cciTcpSslResetCallback
  Program Name      :- amqrmppa
  Major Errorcode   :- rrcE_PROTOCOL_ERROR
  robe Description :- AMQ9504E: A protocol error was detected
  for channel 'Detected multiple key resets'.
  Comment1        :- Detected multiple key resets
  
  MQM Function Stack
  ccxResponder
  rrxResponder
  rriMQIServer
  ccxReceive
  cciSslSecureReceive
  ccigsk_secure_soc_read
  cciTcpSslResetCallback
  xcsFFST
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users using MQ channels with TLS 1.3 cipherspecs
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  A logic error in the MQ channel code which detects multiple
  invalid key resets incorrectly tracked the asynchronous keys of
  a TLS 1.3 connection, resulting in it incorrectly reporting
  multiple key resets by issuing the error above.
  

Problem conclusion

• The MQ channel code has been modified to resolve the problem.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.2 LTS   9.2.0.4
  v9.x CD    9.2.4
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MQ BASE V9.2

• Fixed component ID

  5724H7281

Applicable component levels