PK67227: RECEIVING DFHPI0002 (CODE X'0507') IN MODULE DFHPITH DUE TO NOT BEING CONFIGURED FOR SSL.

APAR status

• Closed as fixed if next.

Error description

• Issueing a Web Request that is attempting to Open a Session with
  a SSL connection.  Results in receiving the following message:
  .
  DFHPI0002 CICSNAME A severe error (code X'0507') has occurred in
  module DFHPITH.
  .
  This fails with the above message due to NOT being configured
  to make SSL requests.  You'll see the following Trace Entry
  for this problem:
  .
  0202 SOCK  EXIT  - FUNCTION(CONNECT) RESPONSE(EXCEPTION)
  REASON()
  .
  TASK-04922 KE_NUM-0145 TCB-L800A/00XXXXXX RET-XXXXXXXX
  0000  00E00000 0000019B 00000000 00000000
  0010  B0001204 04000000 07000220 00000000
  0020  00000000 00000000 00000000 00000000
  .
  It shows Socket Connect fail with SOCK_REASON = SOCK_SSL_NOT_
  SUPPORTED which equates to a x'20' at offset x'1B' into the
  parmlist of the entry above.
  .
  Receiving an ABEND instead of a MESSAGE indicating you are not
  configured for SSL Communication appears to be severe and
  should be changed to issue a simple message and an appropriate
  response being returned to the application.
  .
  Additional Symptom(s) Search Keyword(s):
  KIXREVSXY
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: A CICS region not being configured to   *
  *                      support SSL causes DFHPITH to issue an  *
  *                      unnecessary DFHPI0002 and a system      *
  *                      dump.                                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  An application issues an EXEC CICS INVOKE WEBSERVICE. The URI
  being used begins https:// so the connection will require SSL,
  but this CICS system has not been set up to use SSL.
  An exception of sock_ssl_not_supported is passed to DFHPITH
  which has no special handling for this exception, so a message
  DFHPI0002 with a system dump is unnecessarily taken.
  Customer felt this was excessive for this exception.
  
  Additional Keywords: MSGDFHPI0002 PI0002
  

Problem conclusion

Temporary fix

Comments

• This APAR is being closed FIN with concurrence from the
  submitting customer.  This means that a fix to this APAR is
  expected to be delivered from IBM in a release which is being
  developed at the time that the APAR was closed.
  
  The latest release of the product to exit development at the
  time this APAR was closed was:
  
    CICS Transaction Server for z/OS V3.2
  
   EUR21243  EUR 21243
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R400 PSN

     UP

• R500 PSN

     UP