PI58358: MESSAGE DFHSO0123 NOT ISSUED FOR OUTBOUND SSL REQUESTS

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• CICS does not issue message DFHSO0123 for several unexpected
  SSL return codes when CICS is acting as the Client of an
  outbound SSL request.
  If the SSL handshake completes with GSK_ERR_BAD_MESSAGE (410)
  then DFHSOSE does not issue a DFHSO0123 message.  The same is
  true for return codes GSK_ERR_SOCKET_CLOSED (420) and
  GSK_ERR_CONNECTION_CLOSED (437).
  Additional Symptom(s) Search Keyword(s): KIXREVEPH
  Hex equivalents to the error codes: x'19A'  x'1A4'  x'1B5'
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All CICS Users                                               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * CICS does not issue message DFHSO0123 for several unexpected *
  * SSL return codes when CICS is acting as the Client of an     *
  * outbound SSL request.                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * .                                                            *
  ****************************************************************
  If the SSL handshake completes with GSK_ERR_BAD_MESSAGE (410)
  then DFHSOSE does not issue a DFHSO0123 message. The same is
  true for return codes GSK_ERR_SOCKET_CLOSED (420) and
  GSK_ERR_CONNECTION_CLOSED (437).  The message DFHSO0123 will
  point where the error happened.
  

Problem conclusion

• When CICS is acting as the client of an outbound SSL request,If
  the SSL handshake completes with GSK_ERR_BAD_MESSAGE (410), CICS
  will issue a  DFHSO0123 message,the reason code is 410, reason
  is 'Handshake abandoned by peer', the same action for return
  codes GSK_ERR_SOCKET_CLOSED (420) and GSK_ERR_CONNECTION_CLOSED
  (437), when the error is GSK_ERR_SOCKET_CLOSED (420), the reason
  code is 420, the reason is 'Handshake abandoned by peer' for
  message  DFHSO0123, when the error is GSK_ERR_CONNECTION_CLOSED
  (437),the reason code is 437, the reason is 'Handshake abandoned
  by peer' for message  DFHSO0123, so it will useful for diagnose
  problem.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PI54072

• APAR is sysrouted TO one or more of the following:

  UI36443

Modules/Macros

• DFHSOSE
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI36443

     UP16/04/02 P F604

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.