Explanation
Application Transparent Transport Layer Security
(AT-TLS) has finished the specified event. The message creation
time and owning TCP/IP jobname of the process creating the message
are included in the syslog trace prior to the message ID. This message
has a syslog priority of DEBUG and is written to the syslog when
AT-TLS trace option EVENT (8) is specified.
gid is
a hexadecimal value that uniquely identifies the AT-TLS group supporting
the connection or SSL environment.
eid is
a hexadecimal value that uniquely identifies the AT-TLS environment
supporting the connection. Multiple AT-TLS secure environments may
be represented by a single master System SSL secure environment.
If the eid is 00000000, the event does not apply
to a specific environment.
cid is a hexadecimal
value that uniquely identifies this TCP connection for the life of
the connection. A previously issued message EZD1281I provides additional
information about the connection. If the cid is
00000000, the event does not apply to a specific connection.
rcode is
a System SSL or AT-TLS return code. A value other than zero indicates
why the event failed. rcode values under 5000
are generated by System SSL and are defined in z/OS Cryptographic Services System SSL Programming. Rcode
values over 5000 are generated by AT-TLS and are defined in Diagnosing AT-TLS problems in z/OS Communications Server: IP Diagnosis Guide.
event is an AT-TLS
event. Possible values are:
- Connection Abend Close
- An abend occurred while executing AT-TLS work for the specified
connection. The specified connection will be reset and closed.
- Connection Close
- The specified secure connection was closed.
- Connection Init
- A secure connection was initiated for the specified connection.
- Connection Stop
- The specified secure connection was stopped.
- Data Decryption
- Application data was decrypted by System SSL.
- Environment Close
- The specified AT-TLS environment was deleted. The corresponding
System SSL environment was closed.
- Environment Init
- A System SSL environment was initialized for the specified AT-TLS
environment.
- Environment Link
- The specified newly created AT-TLS environment could use an existing
System SSL environment. The new AT-TLS environment was linked to a
master AT-TLS environment that represents a single System SSL environment.
- Environment Link Delete
- The specified linked AT-TLS environment was no longer needed.
It was linked to a master AT-TLS environment. The AT-TLS environment
and its link were deleted. If this was the last AT-TLS environment
linked to the master AT-TLS environment, the master was also deleted
and the corresponding System SSL environment will be closed.
- Environment Master Close
- The specified master AT-TLS environment no longer had any linked
AT-TLS environments. The corresponding System SSL environment was
closed.
- Environment Master Create
- The specified newly created AT-TLS environment could be linked
to a master AT-TLS environment. The master AT-TLS environment did
not exist yet and was created. The master AT-TLS environment corresponds
to a single System SSL environment.
- Environment Master Delete
- The specified master AT-TLS environment was no longer needed
and was deleted from the AT-TLS group. The corresponding System SSL
environment will be closed.
- Environment Master Init
- A System SSL environment was initialized for the specified master
AT-TLS environment.
- Initial Handshake
- The initial SSL handshake process was completed for the specified
connection.
- Messages Dropped
- Syslog messages were dropped as a result of an excessive backlog
of messages to be logged.
- Policy Mapping
- Policy map was attempted for the specified connection.
- Received FIN
- A TCP header with the FIN flag turned on was received on the
secure connection.
- Received Reset
- A TCP header with the Reset flag turned on was received on the
secure connection. The connection is closed.
- Reset Cipher Request
- A request to renegotiate the cipher was processed.
- Reset Ignored
- A TCP header with the Reset flag turned on was received in a response
to an SSL close alert. The reset has been ignored.
- Reset Session Request
- A request to reset the SSL session ID was processed.
- SSL Control Data Read
- Control data, such as handshake or alert data, was read.
add_data is additional information
traced with the following events:
- Connection Abend Close
-
- The handle of the System SSL connection block.
- The handle of the System SSL environment, if used by the connection.
- The abend code.
- Connection Close
-
- The handle of the System SSL connection block.
- The handle of the System SSL environment, if used by the connection.
- Data Decryption
- The handle of the System SSL connection block.
- Environment Close
- The handle of the System SSL environment representing the AT-TLS
environment.
- Environment Init
- The handle of the System SSL environment representing the AT-TLS
environment.
- Environment Link
-
- The handle of the System SSL environment that represents the
master AT-TLS environment.
- The master AT-TLS environment ID.
- Environment Link Delete
-
- The handle of the System SSL environment that represents the
master AT-TLS environment.
- The master AT-TLS environment ID.
- Environment Master Close
- The handle of the System SSL environment representing the master
AT-TLS environment.
- Environment Master Create
- The AT-TLS environment ID just created that necessitates creation
of this master AT-TLS environment.
- Environment Master Delete
- The handle of the System SSL environment representing the master
AT-TLS environment.
- Environment Master Init
- The handle of the System SSL environment representing the master
AT-TLS environment.
- Initial Handshake
-
- The handle of the System SSL connection block.
- The handle of the System SSL environment used by the connection.
- The security protocol used by the secure connection.
- The cipher used by the secure connection.
- Messages Dropped
- The number of messages that were dropped.
- Received FIN
- The number of bytes of encrypted data on the AT-TLS receive queue
when the FIN was received.
- Reset Cipher Request
-
- The handle of the System SSL connection block.
- The handle of the System SSL environment used by the connection.
- Reset Session Request
-
- The handle of the System SSL connection block.
- The handle of the System SSL environment used by the connection.
- SSL Control Data Read
-
- The handle of the System SSL connection block.
- The handle of the System SSL environment used by the connection.
System action
Operator response
System programmer response
System Programmer response varies
by event type:
If event is Connection
Abend Close, then contact IBM® software
support services. For all other event values, if
rcode has a value other than zero, use it to determine
the cause of the error and correct if necessary. See z/OS Communications Server: IP Diagnosis Guide for more information.
Module