IBM Support

PI14630: WMQ V7.1 Z/OS: PROVIDE A SERVICE PARAMETER TO AVOID EXTRA CHECKING CAUSING CSQX631E FOR DATAPOWER SSL CONNECTIONS

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • CSQX631E occurs after migration to MQ v7.1 because DataPower is
    attempting to use NULL_SHA cipherspec with the TLS1.0 protocol,
    which is an invalid combination.
    At WebSphere MQ v710 checking of SSL protocols was tightened up.
    This results in situations like this failing after migration.
    The correct solution is to configure DataPower to use the
    correct protocol i.e. for NULL_SHA it should be using SSL3.0.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 *
    *                 Release 1 Modification 0.                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: SSL channels fail to start following    *
    *                      migration to MQ V710. CSQX631E is       *
    *                      issued, indicating a mismatch in        *
    *                      protocol.                               *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    When starting an SSL channel, MQ V710 validates that the correct
    protocol for the specified cipher spec is being used.
    If a mismatch is detected it correctly issues CSQX631E and
    prevents the channel from starting.
    

Problem conclusion

  • A service parameter is added to help in specific cases where
    CSQX631E is issued after migrating to MQ v710.
    The service parameter should only be used under direction from
    IBM support.
    100Y
    CSQMCNAC
    CSQXCCIS
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI14630

  • Reported component name

    WMQ Z/OS V7

  • Reported component ID

    5655R3600

  • Reported release

    100

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2014-03-27

  • Closed date

    2014-05-27

  • Last modified date

    2014-10-13

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI18351 PI27498

Modules/Macros

  • CSQMCNAC CSQXCCIS
    

Fix information

  • Fixed component name

    WMQ Z/OS V7

  • Fixed component ID

    5655R3600

Applicable component levels

  • R100 PSY UI18351

       UP14/06/28 P F406

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
13 October 2014