PH42453: CICS CONFIGURATION MANAGER CLIENTS NEED TO BE UPDATED TO SUPPORT THE LATEST CIPHER SUITES.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• CICS Configuration Manager client using the CCVSSL port may fail
  to connect if the CCVSSL TCPIPservice is define to use only the
  
  latest cipher suites. The processing fails with the following
  error appearing in the CICS region  MSGUSR output:
  
  
  DFHSO0123    Return code 402 received from function
  gsk_secure_socket_init of System SSL. Reason: No common ciphers
  negotiated. Peer: , TCPIPSERVICE:CCVSSL.
  
  You may also see  EZD1286I TTLS error msg with a RC: 402; which
  indicates a cipher mismatch.
  Additional Keywords and Symptoms:
  KIXREVRJL
  
  MSGDFHSO0123 RC402
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of CICS Configuration Manager.     *
  ****************************************************************
  * PROBLEM DESCRIPTION: The CICS Configuration Manager clients  *
  *                      need to be updated to support the       *
  *                      latest cipher suites.                   *
  ****************************************************************
  CICS Configuration Manager client using the CCVSSL port may fail
  to connect if the CCVSSL TCPIPservice is defined to use only the
  latest cipher suites. The processing fails with the following
  error appearing in the CICS region MSGUSR output:
   DFHSO0123 <date> <time> <region> Return code 402 received from
   function gsk_secure_socket_init of System SSL. Reason: No
   common ciphers negotiated. Peer: <ipaddr>, TCPIPSERVICE:CCVSSL.
  

Problem conclusion

• CICS Configuration Manager is updated to accept any of the
  cipher suites listed in allvalidciphers.xml.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI78705

Modules/Macros

• CCVBHKP  CCVBMAIN CCVOADMN CCVOPRIM
  

Fix information

• Fixed component name

  CICS CONFIG MGR

• Fixed component ID

  5697CIC00

Applicable component levels

• R540 PSY UI78705

     UP21/12/24 P F112

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.