PI74513: DFHSO0123 WITH A RETURN CODE 10 CAUSES A DFHSO0002 WITH A SEVERE ERROR CODE X'080C'

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The DFHSO0123 message with a return code 10 is caused by a
  client error. DFHSOSE does not have any code to handle this
  specific error so it gets treated by default as a server error,
  rather than a client error, and thus generates the DFHSO0002
  severe error message. This is a bit harsh for a client error
  and thus this APAR will lessen the severity of this error and
  only generate the DFHSO0123 message.
  
  Additional Symptom(s) Search Keyword(s): KIXREVEPH
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: DFHSO0002 is issued when an SSL         *
  *                      handshake fails with GSK_ERR_ASN        *
  *                      (response code 10).                     *
  ****************************************************************
  * RECOMMENDATION: .                                            *
  ****************************************************************
  CICS is setup with SSL. A client connects to CICS and a secure
  socket connection is initialized. As the provided TLS
  authentication version does not match what was negotiated
  socket initialization fails with gsk response code 10. CICS
  treats code 10 as a severe error and issues message DFHSO0123
  to report the error code. In addition, DFHSO0002 is issued and
  a system dump is taken. The response code 10 should be treated
  as a client side error, the DFHSO0002 and the system dump are
  unnecessary for this type of error.
  
  Additional Keywords: msgDFHSO0123 SO0123 msgDFHSO0002 SO0002
  

Problem conclusion

• DFHSOSE has been changed to only issue message DFHSO0123 when
  the SSL handshake fails with GSK_ERR_ASN.  The DFHSO0002 is not
  issued and a system dump is not taken.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI45494 UI45495 UI45496

Modules/Macros

• DFHSOSE
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI45495

     UP17/03/16 P F703

• R800 PSY UI45496

     UP17/03/16 P F703

• R900 PSY UI45494

     UP17/03/16 P F703

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.