PI28362: PDTCC REFINEMENT OF ELIGIBLE ENCRYPTION METHODS

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• PDTCC Refinement of eligible encryption methods
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of PDTOOLS Common Server               *
  ****************************************************************
  * PROBLEM DESCRIPTION: When SSL_REQUIRED=YES is used to        *
  *                      protect the communications between      *
  *                      the server and clients, the server      *
  *                      was enabled for renegotiation to        *
  *                      earlier levels of encryption.           *
  ****************************************************************
  * RECOMMENDATION: Apply the provided PTF.                      *
  ****************************************************************
  While the server is not vulnerable to known SSL attacks at this
  time, the server should be updated to remove any implication
  that the encryption methods it is enabled for are insecure.
  

Problem conclusion

• The server has been updated in order to restrict the
  encryption methods to current TLS based.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

•    IPV0LVL
  

Fix information

• Fixed component name

  ZPDTOOLS CCOMP(

• Fixed component ID

  5655IPV00

Applicable component levels

• R160 PSY UI22989

     UP14/11/18 P F411

• R170 PSY UI22990

     UP14/11/19 P F411

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.