IBM Support

IT21089: "ANS1592E FAILED TO INITIALIZE SSL PROTOCOL" USING 8.1.0.2 API CLIENT FOR X86_64 LINUX

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • The 8.1.0.2 api client on Linux for x86_64  is packaged with two
    incorrect links.
    
    The TIVsm-API64-8.1.0-2.x86_64 package supplies under:
    
    /opt/tivoli/tsm/client/api/bin64/
    
    files:
    libssl.so.1.0.2
    libcrypto.so.1.0.2
    
    links:
    libVMssl.so -> libssl.so.1.0.1
    libVMcrypto.so -> libcrypto.so.1.0.1
    
    as can be seen the links are incorrectly pointing to
    libssl.so.1.0.1 and libcrypto.so.1.0.1
    instead of libssl.so.1.0.2 and libcrypto.so.1.0.2
    
    This causes dsmc  to fail to start with an error like:
    
    ANS1592E Failed to initialize SSL protocol.
    
    error log reports:
    
    ANS1579E GSKit function gsk_secure_soc_init failed with 420:
    GSK_ERROR_SOCKET_CLOSED
    ANS9020E A session could not be established with a IBM Spectrum
    Protect server or client agent.  The return code is -362.
    ANS1592E Failed to initialize SSL protocol.
    
    
    | MDVREGR 8.1.0.2-TIV_5698MCL|
    
    IBM Spectrum Protect versions affected:
    Client  8.1.0.2 on Linux  platform
    
    
    Initial Impact: Medium
    
    Additional Keywords:  TSM IBM Spectrum Protect packaging api
    

Local fix

  • Delete the two existing links and recreate new links pointing to
     the correct file versions.
    
    ie
    rm libVMssl.so
    rm libVMcrypto.so
    ln -s libssl.so.1.0.2 libVMssl.so
    ln -s libcrypto.so.1.0.2 libVMcrypto.so
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * IBM Spectrum Protect 8.1.0.2 API Client Linux                *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See ERROR DESCRIPTION                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This problem is currently *
    * projected to be fixed in levels 8.1.4.  Note that this       *
    * information is subject to change at the discretion of IBM    *
    ****************************************************************
    

Problem conclusion

  • The link pointers for libVMssl.so and libVMcrypto.so dictated in
    the packaging script have been updated to point to the correct
    version in the API package.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT21089

  • Reported component name

    TSM CLIENT

  • Reported component ID

    5698ISMCL

  • Reported release

    81L

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-06-20

  • Closed date

    2017-08-22

  • Last modified date

    2017-08-22

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TSM CLIENT

  • Fixed component ID

    5698ISMCL

Applicable component levels

  • R81L PSY

       UP



Document information

More support for: Tivoli Storage Manager

Software version: 81L

Reference #: IT21089

Modified date: 22 August 2017