PH69627: TLS 1.0 GETS DISABLED DUE TO FLAGS BEING READ FROM UNINITIALIZED STORAGE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• TLS 1.0 may be disabled on channel initiator startup despite
  being configured due to flags being read from uninitialized
  storage.
  
  This results in the following message being displayed on channel
  initiator start up CSQX694I CSQ1 CSQXSSLI Cipher specifications
  based on the TLS V1.0 protocol are disabled, and the issuing of
  CSQM102E when using TLS 1.0 cipherspecs
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 3 Modification 0 and Release 4       *
  *                 Modification 0                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: TLS 1.0 CipherSpecs may be unexpectedly *
  *                      enabled or disabled on Channel          *
  *                      initiator start up                      *
  ****************************************************************
  Internal control flags that are responsible for setting whether
  TLS 1.0 should be enabled or disabled are not initialized before
  they are used, resulting in the flags potentially being set
  incorrectly.
  

Problem conclusion

• The internal control flags are now correctly initalized before
  they are used
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO06863 UO06864

Modules/Macros

• CSQXJST
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R300 PSY UO06864

     UP26/04/14 P F604

• R400 PSY UO06863

     UP26/04/14 P F604

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.