PI87515: DFHWB0730 ISSUED DUE TO SECURE_CONNECTION(NO)

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Customer is converting TCPIPSERVICE definitions to make use
  of AT-TLS by coding SSL(ATTLSAWARE).  DFHWB0730 is issued when
  trying to make use of the new configuration.  The problem stems
  from CICS determining the connection is not secure. In this
  instance SECURE_CONNECTION(NO) is being returned from a DFHSOIS
  INQUIRE which indicates there is a problem.  The connection was
  not marked as secure because the ATTLS_SECURE bit is not turned
  on.  In this instance the socket's SSL related block is empty
  except for the eyecatcher.  No information has been recorded.
     Earlier trace information contained an SO 0CAB exception
  trace entry indicating the SIOCTTLSCTL call made by CICS had
  failed with a return code of 120 (EINTR).  This is the call
  made by CICS to AT-TLS to determine the state of the
  connection.  The call has failed unexpectedly, but CICS has
  continued anyway.  Any future processing that requires any
  TLS state information will not work correctly
   Additional Symptom(s) Search Keyword(s): KIXREVEPH
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: CICS issues DFHWB0730 or DFHWB0367 when *
  *                      a web client attempted to connect to    *
  *                      a CICS region secured by AT-TLS.        *
  ****************************************************************
  A connection is made to a CICS region which has an ATTLSAWARE
  TCPIPSERVICE.  The socket listener task (CSOL) makes a BPXIOCTL
  call to obtain information relating to the state of the AT-TLS
  connection.  This call fails due to an interrupt and EINTR (120)
  is returned.  Processing continues without any AT-TLS
  information being recorded.
  
  A CWXN task gets attached to process the request.  This task may
  incorrectly issue message DFHWB0730 or DFHWB0367 due to the
  connection appearing to not be secured by AT-TLS.
  
  Keywords: WB0730  msgDFHWB0730  WB0367  msgDFHWB0367
  

Problem conclusion

• DFHSOLS has been changed so that if the BPXIOCTL call made for
  an ATTLSAWARE TCPIPSERVICE fails with an EINTR response, the
  call is retried.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI53126 UI53127

Modules/Macros

• DFHSOLS
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI53127

     UP18/01/12 P F801

• R100 PSY UI53126

     UP18/01/12 P F801

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.