IBM Support

MA41699 - LIC-COMM SYSTEM SSL RESTRICTIONS INTERFACE

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 APAR (Authorized Program Analysis Report)

Abstract

LIC-COMM SYSTEM SSL RESTRICTIONS INTERFACE

Error Description

Add support for -sslRenegotiation:disabled which will turn off  
all peer initiated renegotiation support in System SSL          

Problem Summary

Please see the ERROR DESCRIPTION section.                      
regardless of RFC5746 support.                                  

Problem Conclusion

This APAR provides the ability to disable all peer initiated SSL
handshake renegotiation in System SSL.                          
                                                               
To change the System SSL settings with the Start System Service
Tools (STRSST) command, follow these steps:                    
1. Open a character-based interface.                            
2. On the command line, type STRSST.                            
3. Type your service tools user name and password.              
4. Select option 1 (Start a service tool).                      
5. Select option 4 (Display/Alter/Dump).                        
6. Select option 1 (Display/Alter storage).                    
7. Select option 2 (Licensed Internal Code (LIC) data).        
8. Select option 14 (Advanced analysis).                        
9. Select option 1 (SSLCONFIG).                                
10. Enter -h                                                    
                                                               
This will show the help screen that describes the input strings
to change the System SSL setting for -sslRenegotiation.        

Temporary Fix

Comments

Circumvention


PTFs Available

R610 MF54832 PTF Cover Letter   2122
R611 MF55276 PTF Cover Letter   2122
R710 MF54814 PTF Cover Letter   2115

Affected Modules

         
         

Affected Publications

Summary Information

Status............................................ CLOSED PER
HIPER........................................... No
Component.................................. 9400DG300MF6
Failing Module.......................... RCHMGR
Reported Release................... R545
Duplicate Of..............................




System i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.1.0"},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG15Q","label":"APARs - OS\/400 General"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V5R4M0;V5R4M5;V6R1M0;V6R1M1;V7R1M0","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG16B","label":"APARs - i5\/OS V6R1 environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V5R4M0;V5R4M5;V6R1M0;V6R1M1;V7R1M0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
23 July 2015