OA65656: HOD 14.0.6.0 - FTP CLIENT CERTIFICATE SELECTION IGNORES KEY USAGE SPECIFIED IN CONFIGURATION

APAR status

• Closed as program error.

Error description

• Users are on HOD v14.0.6.0
  
  When the Admin enables FTP to support client authentication he
  was able to configure it the same way he did with the 3270
  display / printer sessions and the selected certificate showed
  correctly.
  
  However, when the FTP session is launched under HOD
  v14.0.6.0 release, the key usage options
  are completely ignored and a large list of certificates that do
  not meet the criteria get presented.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Host On-Demand FTP Client users                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * FTP Client session certificate list ignores extended key     *
  * usage properties.                                            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  While configuring secured FTP Session, we select Client
  Authentication using browser keyring along with extended key
  usage properties. In the certificate selection drop down, it
  ignores extended key usage selected property value.
  

Problem conclusion

• Code changes have been made to fix this issue.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• HOD
  

Fix information

• Fixed component name

  HOD MVS

• Fixed component ID

  5733A5900

Applicable component levels