IBM Support

LI81321: STRENGTHEN CIPHER SUITES FOR ETCD, KUBE SERVICES, AND CASSANDRA-OPERATOR

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Strengthen cipher suites for etcd, kube services, and
    cassandra-operator.
    

Local fix

  • Recommend to upgrade 2018.4.1.10, in the interim if needed
    contact support for potential options for workarounds.
    

Problem summary

  • <span style="background-color:rgb(255, 255,
    255)">cassandra-operator microservice and etcd, kubernetes
    services in OVA allow TLS_RSA </span><span
    style="background-color:rgb(255, 255, 255)">ciphers such as
    TLS_RSA_WITH_AES_128_GCM_SHA256 and
    TLS_RSA_WITH_AES_256_GCM_SHA384, which have been marked weak.
    </span>
    

Problem conclusion

  • These weak ciphers have been disabled from APIC 2018.4.1.10.
    

Temporary fix

Comments

APAR Information

  • APAR number

    LI81321

  • Reported component name

    API CONNECT ENT

  • Reported component ID

    5725Z2201

  • Reported release

    18X

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-01-28

  • Closed date

    2020-03-02

  • Last modified date

    2020-03-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    API CONNECT ENT

  • Fixed component ID

    5725Z2201

Applicable component levels

  • R18X PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSMNED","label":"IBM API Connect"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"18X","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
29 September 2021