PH69880: SUPPLY AN ESTAE EXIT FOR CICS SECURE SOCKETS CODE TO PROVIDE DIAGNOSTICS/INTERCEPT PROBLEMS IN GSKSRVR.

APAR status

• Closed as new function.

Error description

• This presented as an abend in GSKSRVR.  The System SSL server
  providing support for applications doing SSL/TLS work.
  It was suspected that GSKSRVR abended due to a sudden
  influx of requests which led to more S8 TCBs, more handshakes
  and increased STIMERM overhead. Documentation was limited so
  System SSL weren't able to determine exactly why GSKSRVR
  abended.
  
  CICS became unresponsive, this apar will provide an ESTAE exit
  in Secure Sockets code within CICS to capture diagnostics..
  .
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: CICS becomes unresponsive after         *
  *                      initial pthread TCB ( IPT ) abends      *
  *                      unexpectedly whilst performing SSL      *
  *                      work.                                   *
  ****************************************************************
  This problem presented as CICS becoming unresponsive with
  evidence of backed up work not being able to run.
  
  The IPT (Initial pthread TCB) for the SSL system SSL enclave
  is unexpectedly abended.
  CICS has no recovery environment to intercept the abend of this
  TCB so no diagnostic message or dump information is produced
  thus hampering diagnosis.
  

Problem conclusion

• DFHLEPT is amended to establish an ESTAE exit when it detects
  the IPT TCB has abended unexpectedly in the GSKSRVR enclave
  (which processes SSL requests on behalf of CICS ).
  New message DFHSO0005 will be issued when the ESTAE is driven
  and will attempt to take a system dump with dump code KERNDUMP.
  Diagnostic information from the SDWA will be saved into new
  pointers anchored from the data area addressed by kipt_sdwa_ptr.
  
  In addition, DFHLEPT may also issue new message DFHSO0008 to
  indicate a malfunction in IPT_CONTROL_LOOP, the main interface
  loop between CICS and the SSL enclave.
  
  The PTF associated with this APAR supplies the following new
  messages which will be available at the online CICS publications
  after the next refresh.
  
  DFHSO0005 An unexpected abend occurred on the initial pthread
  TCB for the system SSL enclave.
  Explanation
  The initial pthread TCB for the system SSL enclave has
  abended unexpectedly.
  System Action
  CICS attempts to take a system dump with dumpcode KERNDUMP.
  User Response
  Investigate the system SSL enclave using the system dump and any
  previously output diagnostic information provided by CICS, the
  access methods, or the operating system.
  If you cannot resolve the problem, you will need further
  assistance from IBM.
  Module
  DFHLEPT
  
  DFHSO0008 Processing in IPT_CONTROL_LOOP was terminated or
  abended on the pthread TCB in the system SSL enclave.
  Explanation
  The initial pthread TCB for the system SSL enclave has
  detected that it has unexpectedly terminated.
  System Action
  CICS may continue processing but with unpredictable results.
  User Response.
  Investigate the cause of the unexpected termination using
  diagnostics from CICS and the SYSTEM SSL enclave.
  If you cannot resolve the problem, you will need further
  assistance from IBM.
  Module
  DFHLEPT
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO07931

Modules/Macros

• DFHLEPT  DFHLEPTC DFHLEPTD DFHLEPTI DFHLEPTQ DFHMESOC DFHMESOE
  DFHMESOK
  

Fix information

• Fixed component name

  CICS TS Z/OS V6

• Fixed component ID

  5655YA100

Applicable component levels