PI64778: DFHPI0002 SEVERE ERROR CODE X'0507' IN MODULE DFHPITH

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The application issues an INVOKE SERVICE command.
  DFHPITH processes a CONVERSE for an SSL handshake.
  This fails because the connection got closed.
    DFHWBCL returns the correct response to DFHPITH.
  But it does not record that fact in the WBO.
    DFHPITH issues messages DFHPI0404 and DFHPI0400
  to indicate that the connection was closed.
  .
    At the end of converse processing
  DFHPITH calls DFHWBCL for CLOSE_SESSION.
  which returns WBCL_DISASTER.
  .
    An attempt is made to put the socket back into the pool.
  This failed due to the socket already being closed.
  .
    If the wbo_session_closed flag
  had been set on earlier by DFHWBCL
  the DFHSOPL call would have been bypassed
  and the CLOSE_SESSION processing would have worked.
  .
    The trace entries were:
  SOSE  *EXC* -
          SYSTEM_SSL_ERROR
          GSK_RESPONSE(GSK_ERR_SOCKET_CLOSED)
          FUNCTION(SECURE_SOC_INIT)
          RESPONSE(EXCEPTION)
          REASON(CONNECTION_CLOSED)
          GSK_RETURN_CODE(1A4)
          CERTIFICATE_USERID()
          CIPHER_SELECTED()
  .
  PITH *EXC* - WB_CLIENT_SUPPORT_FAILURE
          FUNCTION(CONVERSE)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All CICS users.                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * DFHSOCK SWITCH_TO_SOCKET_TCB returns an                      *
  * UNKNOWN_SESSION_TOKEN exception after a socket is closed     *
  * during a SSL handshake.                                      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * .                                                            *
  ****************************************************************
  An application makes an EXEC CICS INVOKE SERVICE request.
  This is to be sent to a remote system using SSL and outbound
  connection pooling.
  An SSL handshake is needed as part of processing the request.
  During this handshake, the remote server closes the connection.
  The DFHSOCK SEND for the handshake closes the socket and returns
  
  RESPONSE(EXCEPTION) REASON(CONNECTION_CLOSED).
  Messages DFHPI0404 and DFHPI0400 are issued to report the
  problem.
  DFHPITH calls DFHWBCL CLOSE_SESSION to close the session.
  DFHSOCK SWITCH_TO_SOCKET_TCB returns RESPONSE(EXCEPTION)
  REASON(UNKNOWN_SESSION_TOKEN) because the socket is already
  closed.
  

Problem conclusion

• CICS is changed so the closure of the socket is not done by
  the DFHSOCK SEND code but is dealt with in the DFHWBCL
  CLOSE_SESSION.
  DFHWBCL CLOSE_SESSION is changed to bypass the attempt to return
  
  an outbound pooled socket to the pool when a DFHSOCKM SEND has
  failed with RESPONSE(EXCEPTION) REASON(CONNECTION_CLOSED).
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PI63934

• APAR is sysrouted TO one or more of the following:

  UI40059

Modules/Macros

• DFHSOCK  DFHWBCL
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI40059

     UP16/08/18 P F608

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.