PI13795: ZOSMF CONFIGURATION ASSISTANT SECURE FTP LOG INCORRECTLY SHOWS CIPHER SSL_NULL_WITH_NULL_NULL

APAR status

• Closed as fixed if next.

Error description

• When using a zOSMF Configuration Assistant FTP client that is
  configured secure (SSL or AT-TLS) the log does not show the
  actual cipher that is being used. Instead if shows
  SSL_NULL_WITH_NULL_NULL . However, the FTP is actually secure
  using one of the ciphers configured.
  
  The actual Cipher used can be verified if using AT-TLS by
  enabling ATTLS debugging in the attls policy. The following
  message written to syslogd shows what cipher was actually used:
  
  EZD1283I TTLS Event GRPID: 00000002 ENVID: 00000003 CONNID:
  04902  RC:    0 Initial Handshake 7EA2FA98 7EBF9118 TLSV1    2F
  
  in this case 2F (TLS_RSA_WITH_AES_128_CBC_SHA)
  
  
  Additional Symptom(s) Search Keyword(s): zosmf config CA FTP
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of V1R13 IBM z/OS Management       *
  *                 Facility for HSMA13A:z/MF Configuration      *
  *                 Assistant                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: Cumulative maintenance fixes.           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  This apar contains cumulative maintenance fixes for the
  following z/MF Configuration Assistant(CA) defects:
  
   - update message in FTP console log for doing upload
  policy file.
  +-------------------------------------------------------------+
  + Please check our Communications Server for OS/390 homepages +
  + for common networking tips and fixes.  The URL for these    +
  + homepages can be found in Informational APAR II11334.       +
  +-------------------------------------------------------------+
  

Problem conclusion

Temporary fix

Comments

• This APAR is being closed FIN(Fixed If Next) with concurrence
  from the submitting customer. This means that a fix to this
  APAR is expected to be deliverd from IBM in a release (if any)
  to be available within the next 36 months.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R13A PSN

     UP