IBM Support

PI85046: WMQ PROVIDE SUPPORT FOR TLS CIPHERS ON Z/OS PLATFORM

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Support for certain TLS ciphers are provided on distributed
    versions of MQ however not currently incorporated into the
    product for MQ on z/OS including the following cipherspecs :
    ECDHE_RSA_WITH_AES_256_GCM_SHA384
    ECDHE_RSA_WITH_AES_128_GCM_SHA256
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
    *                 Release 0 Modification 0.                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: Add the following cipher specs.         *
    *                      ECDHE_RSA_AES_256_GCM_SHA384  X'C030'   *
    *                      ECDHE_RSA_AES_128_GCM_SHA256  X'C02F'   *
    ****************************************************************
    Add the following cipher specifications to the product.
    ECDHE_RSA_AES_256_GCM_SHA384  X'C030'
    ECDHE_RSA_AES_128_GCM_SHA256  X'C02F'
    

Problem conclusion

  • The following cipher specifications are added to the product.
    ECDHE_RSA_AES_256_GCM_SHA384  X'C030'
    ECDHE_RSA_AES_128_GCM_SHA256  X'C02F'
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI85046

  • Reported component name

    MQ Z/OS V9

  • Reported component ID

    5655MQ900

  • Reported release

    000

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-07-26

  • Closed date

    2018-01-17

  • Last modified date

    2019-11-27

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI53263 PI97499

Modules/Macros

  • CSQDSMFC CSQMCNAC CSQXCCIS CSQXSMFU
    

Fix information

  • Fixed component name

    MQ Z/OS V9

  • Fixed component ID

    5655MQ900

Applicable component levels

  • R000 PSY UI53263

       UP18/01/31 P F801

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
27 November 2019