IT38057: FTPSERVER POLICIES CANNOT SPECIFY AN SFTP MAC OF HMAC-SHA2-256

APAR status

• Closed as program error.

Error description

• The FileNodes when used in SFTP mode support connecting to SFTP
  server using a MAC algorithm of hmac-sha2-256, but it is not
  possible to set the "Message authentication code" (i.e. mac)
  property on an FTPServer policy to this value. Attempting to use
  a policy with this value set will cause a BIP3379 error to be
  generated when the policy is used.
  
  BIP3379W: File node 'File Read' in message flow 'Flow'. FTP
  server definition '{SFTPPolicy}:TestServer contains an invalid
  mac property.
  
  This MAC algorithm can be used implicitly in a direct connect to
  an SFTP server without using a policy.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of FTPServer policies connecting to SFTP servers in
  IBM App Connect Enterprise.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  The FileNodes when used in SFTP mode support connecting to SFTP
  server using a MAC algorithm of hmac-sha2-256, but it is not
  possible to set the "Message authentication code" (i.e. mac)
  property on an FTPServer policy to this value. Attempting to use
  a policy with this value set will cause a BIP3379 error to be
  generated when the policy is used.
  
  BIP3379W: File node 'File Read' in message flow 'Flow'. FTP
  server definition '{SFTPPolicy}:TestServer contains an invalid
  mac property.
  
  This MAC algorithm can be used implicitly in a direct connect to
  an SFTP server without using a policy.
  

Problem conclusion

• hmac-sha2-256 is now recognised as a valid MAC algorithm in an
  FTPServer policy.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v11.0      11.0.0.15
  v12.0      12.0.2.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0550

Applicable component levels