PI85046: WMQ PROVIDE SUPPORT FOR TLS CIPHERS ON Z/OS PLATFORM

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Support for certain TLS ciphers are provided on distributed
  versions of MQ however not currently incorporated into the
  product for MQ on z/OS including the following cipherspecs :
  ECDHE_RSA_WITH_AES_256_GCM_SHA384
  ECDHE_RSA_WITH_AES_128_GCM_SHA256
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 0 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: Add the following cipher specs.         *
  *                      ECDHE_RSA_AES_256_GCM_SHA384  X'C030'   *
  *                      ECDHE_RSA_AES_128_GCM_SHA256  X'C02F'   *
  ****************************************************************
  Add the following cipher specifications to the product.
  ECDHE_RSA_AES_256_GCM_SHA384  X'C030'
  ECDHE_RSA_AES_128_GCM_SHA256  X'C02F'
  

Problem conclusion

• The following cipher specifications are added to the product.
  ECDHE_RSA_AES_256_GCM_SHA384  X'C030'
  ECDHE_RSA_AES_128_GCM_SHA256  X'C02F'
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI53263 PI97499

Modules/Macros

• CSQDSMFC CSQMCNAC CSQXCCIS CSQXSMFU
  

Fix information

• Fixed component name

  MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R000 PSY UI53263

     UP18/01/31 P F801

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.