PI37375: SSH CONNECTIONS MAY FAIL WITH ERROR "ALGORITHM NEGOTIATION FAIL"OR "VERIFY: FALSE".

IBM MobileFirst Platform Foundation Interim Fix README for 6.3

APAR status

• Closed as program error.

Error description

• When the IBM MobileFirst Platform Server configuration tools
  (Ant tasks or Server Configuration Tool or Installation Manager)
  make a connection to a DB2 or Oracle database, such a connection
  may fail with error "Algorithm negotiation fail" or "verify:
  false". The "Algorithm negotiation fail" error may occur when
  the ssh daemon on the database server is from OpenSSH version
  6.7 or newer. The "verify: false" error may occur when an Oracle
  JRE version 1.7.0_06 or newer is used.
  

Local fix

• For the "Algorithm negotiation fail" error, the workaround is to
  add specific older, less secure algorithms to the
  /etc/sshd_config file on the database server machine. For the
  "verify: false" error, the workaround is to retry the connection
  attempt.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users of MobileFirst Platform Foundation 6.3 who make a      *
  * connection to a DB2 or Oracle database through the           *
  * configuration tools.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• The fix consists of a new version of the SSH connection code,
  with updated customizations.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WL/MFPF CONSUME

• Fixed component ID

  5725I4301

Applicable component levels

• R630 PSY

     UP