IT21114: SSH KEYS WHEN IMPORTED FROM V5.2.5_X TO 5.2.6.X, DO NOT WORK AND UNABLE TO CREATE NEW SSH USER ID KEY OR SSH HOST ID KEY

iSeries_Media_5020603_6.zip
iSeries_Media_5020603_6
Media_IM_5020603_6
Media_IM_5020603_6

APAR status

• Closed as program error.

Error description

• A new environment V5.2.6.3_1  with Oracle database is built.
  The production environment is V5.2.5.0_14 on SQL Server with
  SSH User ID keys successfully able to connect to remote SFTP
  servers. When these keys are exported from production and
  imported into the new V5.2.6.3_1 QA, SFTP Client Begin Sessions
  fails to connect to same SFTP Server (that the production was
  connecting to).
  
  
  After this point, V5.2.6.3_1 environment does not enable the
  creation of new SSH
  User ID keys or SSH Host Id keys.
  
  Error Message:
  SFTPClientBeginSession failed.
  Error Message = [Could not complete connection to specified
  host :]
  

Local fix

• STRRTC - 565664
  SB/SB
  
  Circumvention:
  Add the following to customer_overrides.properties
  security.supportCBCCiphers=true
  

Problem summary

• Users Affected:
  All
  
  Problem Description:
  With CBC Ciphers enabled, the ID keys do not appear in the
  remote profile drop down and the file transfers which use
  the existing ID keys also fail.
  
  Platforms Affected:
  All
  

Problem conclusion

• Resolution Summary:
  
  A code fix is provided.
  
  Delivered In:
  5020602_5
  5020603_6
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels