IT43760: TLSV1.3 CIPHERS CONFIGURED IN THE CIPHERSPEC PROPERTY OF THE INTEGRATION SERVER THROWS BIP3198E ERROR

APAR status

• Closed as program error.

Error description

• Configuring TLSV1.3 ciphers in the CipherSpec property of the
  integration server throws the below error:
  
  BIP3198E: An error occurred when starting the HTTPS Connector:
  Cipher specification list is invalid.
  
  BIP3198E: An error occurred when starting the HTTPS Connector:
  no cipher match.
  
  BIP3198E: An error occurred when starting the HTTPS Connector:
  No certificate provided. (this arrives 30 seconds later,
  exactly)
  
  whereas while using the default cipher list(not setting
  CipherSpec property), TLSV1.3 ciphers are available and
  connection is successful.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of App Connect Enterprise V11 and V12 configuring
  TLSV1.3 ciphers in the CipherSpec property of the integration
  server.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  Configuring TLSV1.3 ciphers in the CipherSpec property of the
  integration server throws the below error:
  
  BIP3198E: An error occurred when starting the HTTPS Connector:
  Cipher specification list is invalid.
  
  BIP3198E: An error occurred when starting the HTTPS Connector:
  no cipher match.
  
  BIP3198E: An error occurred when starting the HTTPS Connector:
  No certificate provided.
  (this arrives 30 seconds later, exactly)
  
  whereas using the default cipher list(not setting CipherSpec
  property), TLSV1.3 ciphers are available and
  connection is successful.
  

Problem conclusion

• Product has been modified such that configuring CipherSpec
  property of the integration server using the TLSV1.3 ciphers no
  longer throws BIP3198E error.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v11.0      11.0.0.22
  v12.0      12.0.9.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0550

Applicable component levels