PH34420: SERVER FAILS TO START WHEN SSLCIPHERSPEC 30 IS SET IN HTTPD.CONF

APAR status

• Closed as program error.

Error description

• The Apache HTTP server fails to start with message Syntax error
  on line xxx of /u/ihsa_zos/ihs/conf/httpd.conf:
  
  Invalid cipher
  spec 30
  

Local fix

• Comment out the line that specifies
  SSLCipherSpec 30
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server on z/OS        *
  ****************************************************************
  * PROBLEM DESCRIPTION: Cipher "30", SSL_NULL_WITH_NULL_NULL,   *
  *                      cannot be referenced in "SSLCipherSPec" *
  *                      directives.                             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Cipher "30", SSL_NULL_WITH_NULL_NULL, cannot be present in any
  SSLCipherSpec directive in httpd.conf or the server will fail to
  start.
  This cipher is disabled by default and offers no encryption, but
  even disabling the disabled cipher will cause an error early in
  parsing.
  

Problem conclusion

• We restored the ability to reference this cipher with
  SSLCipherSpec.
  
  The fix for this APAR is targeted for inclusion in IBM HTTP
  Server fix pack 9.0.5.8. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS IHS ZOS

• Fixed component ID

  5655I3510

Applicable component levels