PH64421: A dump is taken incorrectly in CICS for a System SSL gsk_secure_socket_init() rc516 (0x204) return code

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• System SSL gsk_secure_socket_init() return code rc516 (0x204)
  causes a CICS dump to be taken.
  
  In the CICS joblog MSGUSR DD,  you see the following message:
  
  DFHSO0123 07/11/2024 02:27:03 Return code 516 received from
  function gsk_secure_socket_init of System SSL. Reason:.
  Unrecognized return code. Peer: <dotted IP address>
  TCPIPSERVICE: <TCPIPSERVICE name>.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: A DFHSO0002 dump is taken incorrectly   *
  *                      in response to a rc516 (0x204) response *
  *                      to a System SSL                         *
  *                      gsk_secure_socket_init() call.          *
  ****************************************************************
  In the reported problem, CICS had been configured to process
  HTTP requests secured using TLS 1.3.
  A request was received which caused CICS to invoke System SSL
  function gsk_secure_socket_init().
  However the TLS handshake failed with a return code of 516.
  CICS issued message DFHSO0123 which did not indicate the reason
  for the 516.   Additionally CICS took a system dump which was
  unnecessary for this failure.
  
  Depending on client SSL configuration it is possible that CICS
  will receive a rc516 (0x204) response to a System SSL
  gsk_secure_socket_init() function call.
  

Problem conclusion

• CICS has been updated so that a dump is no longer taken for the
  rc516 response to a System SSL gsk_secure_socket_init() function
  call.
  Messages DFHSO0123 and DFHSO0499 will now include the correct
  explanatory message insert for rc 516.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO05394 UO05395 UO05396

Modules/Macros

• DFHMEAPC DFHMEAPK DFHMESOC DFHMESOE DFHMESOK DFHSOSE
  

Fix information

• Fixed component name

  CICS TS Z/OS V6

• Fixed component ID

  5655YA100

Applicable component levels

• R400 PSY UO05396

     UP25/10/18 P F510

• R500 PSY UO05395

     UP25/10/21 P F510

• R600 PSY UO05394

     UP25/10/18 P F510

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.