IT42208: Update level of GSKit supplied with IBM MQ 9.2 LTS to GSKit 8.0.55.29

APAR status

• Closed as program error.

Error description

• IBM MQ ships the GSKit component to provide cryptographic
  capabilities. This APAR updates this component to the GSKit
  level 8.0.55.29
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of IBM MQ version 9.2 LTS
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  This APAR updates the GSKit component supplied with IBM MQ
  version 9.2 to the level:
  
      8.0.55.29
  

Problem conclusion

• This APAR updates the GSKit component level for the following
  platforms:
  
    AIX
    Linux (x86-64)
    Linux PPC64 Little Endian
    zLinux
    Windows
  
  
  This GSKit update includes support for the PBES2 keystore
  encryption algorithm, using the PBEWithHmacSHA384 hash.
  
  For compatibility with existing keystores, the PBES1 algorithm
  remains defined by default.
  
  If the user chooses to use the (recommended) PBES2 algorithm,
  they can create a new keystore using the "-pqc true" option with
  runmqakm.
  
  PBES2 keystores cannot be used by MQ queue managers or clients
  running a level of MQ that included a GSKit version lower than
  8.0.55.28
  
  On the IBM MQ Appliance, only PBES1 keystores are supported.
  
  Due to a limitation of the Java runtime, only PBES1 keystores
  are supported by Java processes which can interact with CMS
  keystores, such as runmqckm, MQTT, MQXR and AMQP.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.2 LTS   9.2.0.7
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MQ BASE V9.2

• Fixed component ID

  5724H7281

Applicable component levels