IBM Support

SE62802 - OSP-LWI IBM NAVIGATOR FOR I TLS SSL PROTOCOL USE

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 APAR (Authorized Program Analysis Report)

Abstract

OSP-LWI IBM NAVIGATOR FOR I TLS SSL PROTOCOL USE

Error Description

javax.net.ssl.SSLException: Handshake terminated SSL engine    

Problem Summary

****************************************************************
* PROBLEM: (SE62802) Licensed Program = 5770SS1 for i 7.1 and  *
*                                       i 7.2                  *
*           Usability of a Product's MAJOR Function            *
*            Navigator for i cannnot be accessed.              *
****************************************************************
* USERS AFFECTED: All IBM i operating system Navigator for     *
*                 i users.                                     *
****************************************************************
* RECOMMENDATION: Apply PTF SI57922 for i 7.1.                 *
*                 Apply PTF SI57923 for i 7.2.                 *
****************************************************************
*******                                                        
javax.net.ssl.SSLException: Handshake                          
terminated SSL engine when accessing                            
Navigator for i.                                                

Problem Conclusion

Need to automatically disable SSL Version 3 for                
the HTTP ADMIN server, so that port 2005 will                  
only use TLS. This is to address concerns about                
CVE-2014-3566 (POODLE).                                        

Temporary Fix

                       *********                                
                       * HIPER *                                
                       *********                                

Comments

Circumvention


PTFs Available

R710 SI68126 PTF Cover Letter   1000
R720 SI57923 PTF Cover Letter   8032

Affected Modules

         
         

Affected Publications

Summary Information

Status............................................ CLOSED PER
HIPER........................................... Yes
Component.................................. 5770SS100
Failing Module.......................... RCHMGR
Reported Release................... R710
Duplicate Of..............................




System i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG15Q","label":"APARs - OS\/400 General"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V7R1M0;V7R2M0","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG16C","label":"APARs - IBM i 7.1 environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V7R1M0;V7R2M0","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG16E","label":"APARs - IBM i 7.2 environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V7R1M0;V7R2M0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
04 August 2018