PI97353: DFHSO0123 RC 412 RECEIVED FROM 'GSK_SECURE_SOCKET_INIT' OF SYSTEM SSL. REASON: UNSUPPORTED OPERATION.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Using CICS TS 5.2 and Configuration Manager 5.2.  You are
  unable to use SSL to connect for your CM region. When you
  recycled the region you get the following error:
  DFHSO0123 Return code 412 received from function
  'gsk_secure_socket_init' of System SSL. Reason:
  Unsupported operation.
  The CM TSO client does not work with TLS 1.2.
  Additional Symptom(s) Search Keyword(s): KIXREVCTC
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of CICS Configuration Manager      *
  ****************************************************************
  * PROBLEM DESCRIPTION: ISPF dialog receives 'Socket Init       *
  *                      failed' attempting to connect to the    *
  *                      CICS Configuration Manager Server SSL   *
  *                      port when the region specifies SIT      *
  *                      parameter ENCRYPTION=TLS12.             *
  ****************************************************************
  The customer is implementing SSL security in the Configuration
  Manager Server region. The SIT ENCRYPTION parameter is set to
  TLS12. When the ISPF dialog attempts to connect to the SSL port,
  the following ISPF dialog error occurs:
  
  CCVS020 Socket Init failed
  A Secure Socket Init failed. It could be:  connection closed by
  peer; incorrect message received from peer; Peer certificate is
  removed; Insufficient storage.
  
  The CICS region MSGUSR output contains the following messages:
  
  DFHSO0123 <date> <time> <applid>
            Return code 412 received from function
            'gsk_secure_socket_init' of System SSL.
            Reason: Unsupported operation.
            Peer: <ipaddress>, TCPIPSERVICE: CCVSSL.
  
  DFHWB0732 <date> <time> <applid>
             CWXN CICS Web attach processing encountered a sockets
             I/O error while receiving a client request.
             Host IP address: <ipaddress>.
             Client IP address: <ipaddress>.
             TCPIPSERVICE: CCVSSL
  
  The problem arises because the SSL socket handling routines are
  configured to handle TLS10.
  

Problem conclusion

• CICS Configuration Manager is corrected. The SSL socket handling
  routines are now improved to handle TLS11 and TLS12 as well as
  TLS10. The correction applies to both the ISPF dialog client and
  the batch utilities CCVBMAIN and CCVBHKP.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI55706 UI55707 UI55708

Modules/Macros

• CCVBHKP  CCVBMAIN CCVOADMN CCVOPRIM
  

Fix information

• Fixed component name

  CICS CONFIG MGR

• Fixed component ID

  5697CIC00

Applicable component levels

• R520 PSY UI55706

     UP18/05/11 P F805

• R530 PSY UI55707

     UP18/05/11 P F805

• R540 PSY UI55708

     UP18/05/11 P F805

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.