IBM Support

LO82423: DISABLE SSLV3 FOR TRAVELER SERVER TO SERVER COMMUNICATION

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • By default, Traveler server to server communication is just
    using unencrypted TCP sockets as these machines should only be
    on the internal network which should already be secured.
    However, there is an option (NTS_SSL=true) to encrypt the server
    to server communications.  That used to be using SSL which was
    using SSLv3.  This changes the communication to TLS from SSL.
    If NTS_SSL is false, this change has no effect.
    

Local fix

Problem summary

  • If securing server to server communication the encryption
    protocol is now TLS which is more secure than SSL v3.  No change
    is required by  administrator for this security update.
    

Problem conclusion

  • The Notes Traveler server has been updated to use TLS as default
    encription protocol for server to server communication.
    

Temporary fix

Comments

APAR Information

  • APAR number

    LO82423

  • Reported component name

    LOTUS NOTES TRA

  • Reported component ID

    5724E6204

  • Reported release

    901

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-10-22

  • Closed date

    2014-11-06

  • Last modified date

    2014-11-06

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    LOTUS NOTES TRA

  • Fixed component ID

    5724E6204

Applicable component levels

  • R853 PSY

       UP

  • R900 PSY

       UP

  • R901 PSY

       UP



Document information

More support for: IBM Traveler

Software version: 9.0.1

Reference #: LO82423

Modified date: 06 November 2014