IBM Support

PI72438: CEZ - CONNECT ENTERPRISE SSL GSK ERRORS AFTER APPLYING LATEST MAINTENANCE

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Connect Enterprise SSL gsk errors after applying latest
maintenance

CMB2181E - C:E TCP TCP/IP REQUEST TCPRECV  FAILED WITH RC=0071,
RS=011C.

Also, client needs to know if she has AES based Ciphers in
production?
CMB349I - BASE150 P040115 FI49022

23.32.35 STC02972  CMB2200E - C:E TCP THRD=FTPC0001
REQ=SSLSOINI RC=406 RS=GSK_ERR_IO
23.32.35 STC02972  CMB2173E - C:E TCP FTP CLIENT SESSION
TERMINATED ON FTPC0001 DUE TO SCRIPT UserErr RC=0008.
23.32.35 STC02972  CMB2129I - C:E TCPS FTP CLIENT SESSION END
ON THREAD=FTPC0001, RMT=FSSLBOA , CC=0934.

Level 3 Support has determined:

The 1503 that we are receiving is a GOODBYE alert and we are
not handling it correctly.  We only are checking for 150300
(SSL v3) or 150301 (TLS v1.0) but in Sally's case they are
sending us a 150303 (which is TLS v1.2).

Local fix

  • N/A

Problem summary

  • TLS READ/WRITE errors after connection was disconnected.

Problem conclusion

  • Buffer contained 1503xx alert that was not being properly
checked for TLS v1.1 and v1.2.

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    PI72438
    • 

  • Reported component name
    STR CON ENT Z/O
    • 

  • Reported component ID
    5655X0500
    • 

  • Reported release
    150
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2016-11-16
    • 

  • Closed date
    2017-01-04
    • 

  • Last modified date
    2017-01-04
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    STR CON ENT Z/O
    • 

  • Fixed component ID
    5655X0500
    • 



Applicable component levels


    

  • R150  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFVK3","label":"IBM Sterling Connect:Enterprise for UNIX"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.5","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.5","Edition":"","Line of Business":{"code":"","label":""}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            24 September 2021
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback