IBM Support

PM70118: SUPPORT TLS CIPHER SPECIFICATION IN CACHING PROXY VERSION 8 AND ABOVE.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Error Description￘
    Caching Proxy V8 version of GSKit does not enforce Cipher
    hierchy when configured.
    

Local fix

  • Local Fix￘
    n/a
    

Problem summary

  • In Caching Proxy versions 8 and 8.5, setting the SSLV3 cipher
    specs doesn't set the TLS1.x cipher specs. So there is no way to
    specify the ciphers for TLS when it is enabled.
    

Problem conclusion

  • CP now uses the value specified in V3CipherSpecs for both
    SSLV3 and TLSV1 ciphers, as it did prior to the upgrade
    to GSKit8.
    This problem is resolved in fix pack levels 8.0.0.5 and above
    for 8.0 and fix pack levels 8.5.0.2 and above for 8.5.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM70118

  • Reported component name

    WEBS CACH PROXY

  • Reported component ID

    5724H8810

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-08-02

  • Closed date

    2012-12-11

  • Last modified date

    2013-12-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS CACH PROXY

  • Fixed component ID

    5724H8810

Applicable component levels

  • R800 PSY

       UP

  • R850 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCRMEM","label":"Edge Component"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"800","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
03 December 2013