PH10558: READ SOCKET CALL FAILS WITH ECONNRESET WITH AT-TLS AND SMC

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• A client and server are communicating across an SMC-D TCP
  connection that is secured by AT-TLS.
  Near the end of the transaction, the client issues a READ socket
  call while the server issues a WRITE socket call.
  Immediately after the WRITE, the server issues a SETSOCKOPT for
  SO_LINGER and a CLOSE.  This causes an SSL alert to be sent to
  the client side.  The client's TCPIP stack returns an SSL alert
  in response.  The SMC data receive routine on the server side
  sees that data has arrived after the connection closed and
  therefore calls the TCP reset routine.  Thus, a TCP connection
  reset (RST) is sent to the client side.  Since no FIN has
  flowed, the TCPIP stack on the client side decides not to
  ignore the RST.  This results in the client's READ failing with
  RETCODE -1 and ERRNO 54 (ECONNRESET).
  

Local fix

• Turn off SMC.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of the IBM Communications Server for z/OS 2.4,     *
  * 2.5, and 3.1: SMC-D                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Application read socket call fails with ECONNRESET when the  *
  * associated TCP connection is protected by AT-TLS and flows   *
  * over SMC-D.                                                  *
  * When the remote application closes its socket first the TLS  *
  * close_notify alert is processed on the local side and a      *
  * close_notify alert is sent in response.  The arrival of the  *
  * close_notify on the remote is treated as inbound data on a   *
  * connection where the socket has been closed.  This results   *
  * in the remote sending an SMC-D abortive close and the local  *
  * side posts an ECONNRESET error to the connection.  If the    *
  * local application issues a read after this abortive close    *
  * has been received the read call will fail with ECONNRESET.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The processing of a close_notify alert inbound is delayed until
  the local application issues a receive operation.  In addition
  an SMC-D abortive close is not surfaced to the application when
  it is solicited by a TLS close_notify response.
  

Temporary fix

Comments

• ×**** PE25/08/07 FIX IN ERROR. SEE APAR PH67505  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI99517 UI99518 PH66994

Modules/Macros

• EZBTLSRH EZBTLFIO EZBTCSTR EZBTCRD  EZBDGDAT EZBTLCWK EZBCTFME
  EZBLCINB EZBDGTLS EZB2TLSX EZBTCFRD EZBTCFSH
  

Fix information

• Fixed component name

  TCP/IP MVS

• Fixed component ID

  5655HAL00

Applicable component levels

• R250 PSY UI99517

     UP25/05/02 P F505

• R310 PSY UI99518

     UP25/05/02 P F505

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.