IBM Support

IT18625: CHANGES TO SSL HANDLING

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • A number of SSL handling changes are being made. These are:
    
      Weak cipherspecs are now a feature like they are in MQ
      Distributed.
    
      An alternative way of ssl configuration nearer to the MQ
      Distributed.
    
      Enhanced tracing in some functions.
    

Local fix

Problem summary

  • With APAR IT18692 cipherspecs TLS_RSA_WITH_DES_CBC_SHA,
    TLS_RSA_WITH_NULL_SHA256 and TLS_RSA_WITH_3DES_EDE_CBC_SHA have
    become depricated.
    

Problem conclusion

  • The WebSphere MQ product code has been changed as such that
    there is now a new class of WEAK cipherspecs alongside the
    depricated SSLv3 cipherspecs.
    An alternative way of SSL configuration, using the queue
    manager's mqs.ini file, has also been implemented to make the
    operation on HP NonStop more similiar to other MQ platforms.
    The SSLUpdate document has been revised to accommodate these
    product changes.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT18625

  • Reported component name

    WEBS MQ NSS ITA

  • Reported component ID

    5724A3902

  • Reported release

    531

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-01-12

  • Closed date

    2017-02-02

  • Last modified date

    2017-02-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS MQ NSS ITA

  • Fixed component ID

    5724A3902

Applicable component levels

  • R531 PSY

       UP

[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFKSJ","label":"WebSphere MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3.1"}]

Document Information

Modified date:
26 September 2021