MF59800 - LIC-COMM-TCPIP-INCORROUT FTPS PROBLEMS WITH SSL REHANDSHAKE

TYPE PROGRAM  REL  NUMBER   MIN/MAX  OPTION
---- -------- ---  -------  -------  ------
TR   5770999  710  MF99009   00/00    0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the 'IBM License Agreement for Machine
Code', the terms of which were provided in a printed document that was
delivered with the machine.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.





APAR Error Description / Circumvention

-----------------------------------------------
System SSL control blocks may leak if a threaded application has
the following condition:
Thread 1 is blocked on a secure operation such as reading data.
Thread 2 closes the underlying socket for the secure connection
in use by thread 1.

CORRECTION FOR APAR MA44403 :
-----------------------------
SSL control block clean up now correctly handles when the socket
is closed in a second thread.

Also included is a new Sockets LIC trace point that shows the
SSL protocol negotiated for each System SSL connection.

CIRCUMVENTION FOR APAR MA44403 :
--------------------------------
None.


DESCRIPTION OF PROBLEM FIXED FOR APAR MA44400 :
-----------------------------------------------
FTPS problems with SSL rehandshake causes large file transfer to
hang.  Multiple rehandshake attempts initiated by the remote
side before the first rehandshake has completed cause the secure
connection to fail.

CORRECTION FOR APAR MA44400 :
-----------------------------
Multiple rehandshake attempts initiated by the remote side will
be ignored while the first rehandshake attempt is still in
progress.

CIRCUMVENTION FOR APAR MA44400 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


None.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   MF59694      LIC-SSL Control Block Leak In Error Path
   MF59567      JVA-RUN Java Secure Socket Extension (JSSE) Support

Summary Information

System i Support