OA57798: ABEND9C6 during handshake when ASCII dump is request

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Error Description:
  Abend9C6 occurs while writing an informational SSL CTRACE
  message during handshake processing when HTTP CRL revocation is
  enabled (GSK_HTTP_CDP_ENABLE) and System SSL component tracing
  (via GSKSRVR) is active.
  
  No subsequent SSL CTRACE messages are written during the current
  handshake.
  
  Analysis:
  During a handshake, an ASCII dump is requested to be written by
  the read_http_request() routine (because System SSL Component
  tracing via GSKSRVR has been turned on).  In this particular
  case, the record attempting to be written via component trace is
  over the 64K buffer limit allowed by GSKSRVR.
  
  System SSL should skip the writing of the requested component
  trace record if the length of that record exceeds 64K bytes.
  
  Verification Steps
  1. System SSL tracing is ON and GSKSRVR address space is started
  2. HTTP CRL revocation checking is enabled (GSK_HTTP_CDP_ENABLE)
  3. Systrace shows the PC into the GSKSRVR address space followed
  by a GETMAIN for a savearea at GSKADY31+22BE (PCSETUP), and then
  the ABEND9C6.
  4. COPYIN fails with a RC8 (Saved in PCRETCDE).
  5. Parm3 (&ctrace_len) passed into gsk_pc_write_ctrace (at the
  time of the PC into GSKSRVR) exceeds 64K.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users of z/OS System SSL applications using                  *
  * component trace (CTRACE).                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * An 9C6 abend is encountered in the                           *
  * System SSL started task, GSKSRVR,                            *
  * while attempting to write a System SSL                       *
  * trace record over 64K bytes long to                          *
  * component trace.                                             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * APPLY PTF                                                    *
  ****************************************************************
  System SSL component trace supports up to 64K byte length
  records to be written. After an attempt is made to write a
  component trace record that is larger than 64K bytes, no
  additional trace records are written for the currently running
  System SSL API routine (ie. gsk_secure_socket_init() while
  doing a TLS handshake) until the next System SSL API routine is
  called by the application.
  

Problem conclusion

• The System SSL code has been updated to skip the writing of the
  requested component trace record if the length of that record
  exceeds 64K bytes.
  
  This APAR support has been provided through internal defect
  ZD00BZ9F.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ00066 UJ00067 UJ00068 UJ00069 UJ00078

Modules/Macros

• GSKCMS31 GSKCMS64 GSKC31F  GSKC64F  GSKC31   GSKC64
  

Fix information

• Fixed component name

  SYSTEM SSL

• Fixed component ID

  565506805

Applicable component levels

• R430 PSY UJ00067

     UP19/07/23 P F907

• R421 PSY UJ00078

     UP19/07/25 P F907

• R431 PSY UJ00068

     UP19/07/23 P F907

• R420 PSY UJ00069

     UP19/07/24 P F907

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.