IT42408: IBM HATS 9.7 DOES NOT WORK WITH JAVA 2 SECURITY IN STRICT MODE.

APAR status

• Closed as program error.

Error description

• Customer reported an issue with a HATS application running in
  WAS z/OS where there is a connection issue, with the different
  scenarios below.
  If FIPS is enabled and Java 2 security is disabled ->
  SSL(TLS1.0) works but JSSE fails.
  If FIPS is changed as transition mode, it is working fine.
  If both FIPS and Java 2 security is disabled connection is
  working fine.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * HATS users                                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The session fails to connect when WAS strict mode is         *
  * enabled.                                                     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Steps to recreate the problem:
  1. Enable strict mode on WAS.
  2. Create a web project with a secure connection by adding the
  TLS v1.2 parameter in the advance tab and running it on the
  server.
  3. The session fails to connect.
  

Problem conclusion

• Code changes have been made to address this issue in HATS.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL HATS FOR 5

• Fixed component ID

  5724U6800

Applicable component levels