IBM Support

MF56978 - OSP-CERT-INCORROUT ATTEMPT TO USE SSL CERT FAILS BECAUSE AN

PTF Cover Letter


PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

OSP-CERT-INCORROUT ATTEMPT TO USE SSL CERT FAILS BECAUSE AN


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED      PTF/FIX  LEVEL

TYPE PROGRAM  REL  NUMBER   MIN/MAX  OPTION
---- -------- ---  -------  -------  ------
PRE  5770999  710  MF51231   00/00    0000
CO   5770999  710  MF50243   00/00    0000
DIST 5733CY3  710  SI41186   NONE     0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the 'IBM License Agreement for Machine
Code', the terms of which were provided in a printed document that was
delivered with the machine.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.





APAR Error Description / Circumvention

-----------------------------------------------
SSL certificates are created using a critical extension which is
unknown to Digital Certificate Manager. An error is encountered
when one of these certificates is imported:

An unknown critical extension is encountered. the critical
extension means that this certificate is to be applied only to
specific uses. Since the extension is unknown, the certificate
is not valid.

CORRECTION FOR APAR MA42805 :
-----------------------------
Support will be added to no longer reject a certificate
containing an "extended key usage" certificate extension that is
marked critical.

CIRCUMVENTION FOR APAR MA42805 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF MF50242 :
=================================================

This LIC PTF requires the associated PTF SI40305 to be applied for DCM
(Digital Certificate Management) to function properly after the LIC
PTFs have been applied to the system.  If you do not use DCM, nothing
further needs to be done.  Otherwise, load and apply the listed PTF.


Default Instructions

THIS IS A DELAYED PTF TO BE APPLIED AT IPL TIME.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   MF56200      LIC-UNPRED Certificates with MD2-RSA signatures
   MF53400      OSP-CERT-INCORROUT SSL HANDSHAKE UNSUCCESSFUL DUE TO CERTIFI
   MF50242      LIC Enable support for 4096 bit RSA keys
   MF49492      LIC-CERT-UNPRED MSGTCP3D2C - Secure connection error, return
   MF51446      LIC-THREADS-OTHER VL1A002001 AND VL1A002000 VLOGS

Summary Information

System..............................i
Models..............................
Release.............................V7R1M0
Licensed Program...............5770999
APAR Fixed..........................View details for APAR MA42805
Superseded by:......................View fix details for PTF MF99011
Recompile...........................N
Library.............................QSYS
MRI Feature ........................NONE
Cum Level...........................C3298710


System i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.1.0"},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG15V","label":"PTF Cover Letters - OS\/400 General"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V7R1M0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
06 August 2013