PI76057: HTTP PROXY CANNOT ACCEPT TLS 1.2 CONNECTIONS

APAR status

• Closed as program error.

Error description

• Attempts to connect via the HTTP Proxy using TLS 1.2 fails.
  With Java SSL debugging enabled you see the error:
  
  "No cipher suites in common"
  
  STEPS TO REPRODUCE:
  
  1. Create a physical HTTPS transport
  
  2. Enable SSL and for "Override default protocols" enter TLSv1.2
  
  3. Configure the Client settings to connect to a RIT HTTP Proxy
  
  4. Click Test Transport
  
  RESULTS:
  
  The connection cannot be made due to protocol error.
  
  WORKAROUND:
  
  Use TLS 1.1.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users attempting to use the HTTP Proxy with TLS 1.2          *
  * connections.                                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * HTTPS connections cannot be made when using TLSv1.2          *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Update to version 9.1.0.1                                    *
  ****************************************************************
  

Problem conclusion

• Update to version 9.1.0.1
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL INTEGRA TE

• Fixed component ID

  5725G79IT

Applicable component levels

• R800 PSN

     UP

• R801 PSN

     UP

• R850 PSN

     UP

• R851 PSN

     UP

• R860 PSN

     UP

• R870 PSN

     UP

• R871 PSN

     UP

• R900 PSN

     UP

• R901 PSN

     UP

• R910 PSY

     UP