PI57648: RATIONAL DEVELOPER FOR SYSTEM Z (RDZ) HOST CONNECTION EMULATOR FAILS TO CONNECT USING SSL WITH MSCAPI

Rational Developer for System z Fix Pack 1 (9.5.1.1) for 9.5.1.
Rational Developer for z Systems Interim Fix 1 for 9.5.1.1
Rational Developer for z Systems Interim Fix 2 for 9.5.1.1
Rational Developer for z Systems Interim Fix 4 for 9.5.1.1
Rational Developer for System z Fix Pack 1 (9.1.1.4) for 9.1.1.
Rational Developer for System z Fix Pack 2 (9.5.1.1) for 9.5.1.
Rational Developer for System z Fix Pack 3 (9.5.1.1) for 9.5.1.
Rational Developer for System z Fix Pack 1 (9.1.1.5) for 9.1.1.
Rational Developer for System z Fix Pack 4 (9.5.1.4) for 9.5.1.
Rational Developer for System z Fix Pack 5 (9.5.1.5) for 9.5.1.
Rational Developer for System z Fix Pack 1 (9.1.1.6) for 9.1.1.
Rational Developer for System z Fix Pack 5 (9.5.1.6) for 9.5.1.
Rational Developer for z Systems Fix Pack 7 (9.5.1.7) for 9.5.1.
Rational Developer for System z Fix Pack 1 (9.1.1.7) for 9.1.1.
Rational Developer for z Systems Fix Pack 8 (9.5.1.8) for 9.5.1.
Rational Developer for System z Fix Pack 1 (9.1.1.8) for 9.1.1
Rational Developer for z Systems Fix Pack 9 (9.5.1.9) for 9.5.1.
Rational Developer for System z Fix Pack 9 (9.1.1.9) for 9.1.1
Rational Developer for z Systems Fix Pack 10 (9.5.1.10) for 9.5.1.
Rational Developer for z Systems Fix Pack 11 (9.5.1.11) for 9.5.1.
Rational Developer for z Systems Fix Pack 12 (9.5.1.12) for 9.5.1.

APAR status

• Closed as program error.

Error description

• Rational Developer for System z - RDz - v9.5
  
  Attempts to connect to a host using SSL for Host Connection
  Emulator (HCE) session fails if using MSCAPI with the following
  error in the .trace file:
  
  TokenCache.getTokenFromBrowser() could not load MSCAPI Token,
  
  SSLRuntimeException->com.ibm.hod5sslight.SSLRuntimeException:
  reason=(Wrong usage), message-> reason=1 (Wrong usage).
  
  ECLErr@Transport:3:sev=3:ECL0101:
  Transport@---TN3270 [12]: Failed to connect to host xyz.xx.xx,
   port=xx,
  TN3270 ::tel_init()
  com.ibm.hod5sslight.SSLRuntimeException: reason=1 (Wrong usage)
   at com.ibm.hod5sslight.SSLMSCAPIToken.<init>
   at com.ibm.eNetwork.security.ssl.HODSSLMSCAPIToken.<init>
   at com.ibm.eNetwork.security.ssl.HODSSLTokenImpl.
                              getToken_createMSCAPIToken_work
   at com.ibm.eNetwork.security.ssl.HODSSLTokenImpl.
                              getToken_createMSCAPIToken_other
   at com.ibm.eNetwork.security.ssl.HODSSLTokenImpl.getToken
   at com.ibm.eNetwork.security.ssl.HODSSLTokenImpl.
                                         getPrivateCertificate
   at com.ibm.eNetwork.security.ssl.HODSSLiteImpl.createSocket
   at com.ibm.eNetwork.security.ssl.HODSSLImpl.createSocket
   at com.ibm.eNetwork.security.ssl.HODSSLImpl.createSocket
   at com.ibm.eNetwork.ECL.Transport.initialize_tail2
   at com.ibm.eNetwork.ECL.Transport.initialize_tail
   at com.ibm.eNetwork.ECL.Transport.initialize
   at com.ibm.eNetwork.ECL.Transport.registerWithThreadManager
   at com.ibm.eNetwork.ECL.Transport.open
   at com.ibm.eNetwork.ECL.ECLConnection.StartCommunication
   at com.ibm.eNetwork.beans.HOD.Session$2.run
   at com.ibm.eNetwork.HOD.common.ThreadPoolThread.run
  Caused by: java.lang.Exception: mscapi.dll not found
          ... 17 more
  

Local fix

• Do no use SSL with MSCAPI for HCE sessions
  

Problem summary

• See error description.
  

Problem conclusion

• The problem listed in this APAR has been resolved with
  IBM Rational Developer for System z V9.5.1.1 Fix Pack which
  is available from the Recommended Fixes support download page:
  http://www-1.ibm.com/support/docview.wss?rs=2294&uid=swg27006335
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL DEV FOR SY

• Fixed component ID

  5724T0700

Applicable component levels

• R951 PSY

     UP