IT16244: INCORRECT SSL ERROR 'WRONG VERSION NUMBER' IS ISSUED WHEN RECEIVING 5XX ERROR FROM HTTP PROXY SERVER WHEN USING CONNECT

Fix packs for DataPower Service Gateway version 7.0
Fix packs for DataPower B2B Appliance version 7.0
Fix packs for DataPower Integration Appliance version 7.0
Fix packs for DataPower Gateway version 7.1
Fix packs for DataPower Gateway version 7.2
Fix packs for DataPower Gateway version 7.5
Fix packs for DataPower Gateway version 7.5.1
Fix packs for DataPower Gateway version 7.5.2

APAR status

• Closed as program error.

Error description

• Datapower service (i.e MPGW, WSP, etc) is configured to connect
  to backend server through an HTTP Proxy server (as configured
  in the Proxy Policy of the user agent) using the HTTP CONNECT
  method.
  However, if the HTTP CONNECT request to the proxy server,
  receives a 5xx response, Datapower might issue the following SSL
  error:
  20160711T163325.760Z [0x8120002f][ssl][error]
  ssl-client(PMYClientProfile): tid(11573565)[10.x.x.x]
  gtid(11573565): SSL library error: error:1408F10B:SSL
  routines:SSL3_GET_RECORD:wrong version number
  

Local fix

Problem summary

• With the fix the device will now log the actual HTTP response
  code received if there is an error.
  

Problem conclusion

• The fix is available in 7.0.0.16, 7.1.0.13, 7.2.0.10, 7.5.0.4,
  7.5.1.3 and 7.5.2.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• 0
  

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R752 PSY

     UP