IBM Support

IT16244: INCORRECT SSL ERROR 'WRONG VERSION NUMBER' IS ISSUED WHEN RECEIVING 5XX ERROR FROM HTTP PROXY SERVER WHEN USING CONNECT

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Datapower service (i.e MPGW, WSP, etc) is configured to connect
    to backend server through an HTTP Proxy server (as configured
    in the Proxy Policy of the user agent) using the HTTP CONNECT
    method.
    However, if the HTTP CONNECT request to the proxy server,
    receives a 5xx response, Datapower might issue the following SSL
    error:
    20160711T163325.760Z [0x8120002f][ssl][error]
    ssl-client(PMYClientProfile): tid(11573565)[10.x.x.x]
    gtid(11573565): SSL library error: error:1408F10B:SSL
    routines:SSL3_GET_RECORD:wrong version number
    

Local fix

Problem summary

  • With the fix the device will now log the actual HTTP response
    code received if there is an error.
    

Problem conclusion

  • The fix is available in 7.0.0.16, 7.1.0.13, 7.2.0.10, 7.5.0.4,
    7.5.1.3 and 7.5.2.1
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT16244

  • Reported component name

    DATAPOWER

  • Reported component ID

    DP1234567

  • Reported release

    720

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-07-21

  • Closed date

    2016-10-11

  • Last modified date

    2016-11-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • 0
    

Fix information

  • Fixed component name

    DATAPOWER

  • Fixed component ID

    DP1234567

Applicable component levels

  • R752 PSY

       UP



Document information

More support for: IBM DataPower Gateways
General

Software version: 7.2

Reference #: IT16244

Modified date: 18 November 2016