OA60566: HOD FAILS WITH COMM 659 WHEN TRYING TO CONNECT WITH TN3270 SESSION USING TELNET-TLS ON TN3270E PROTOCOL.

IBM Host On-Demand 14.0.3

APAR status

• Closed as program error.

Error description

• Customer reported an issue with Java Applet wrapping of HOD
  v13.0.1-B20180315 with TN3270 session using Telnet-TLS on
  TN3270E protocol.
  Thread-47, handling exception:
  java.lang.NullPointerException
  %% Invalidated: [Session-2,
  TLS_RSA_WITH_AES_256_GCM_SHA384]
  ?
  at
  sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown
  Source)
  ?
  After this error a TCP reset is sent to the server
  and the connection dies.
  

Local fix

• The null pointer exception is fixed in hassln2.jar. The NPE
  occurs in absence of these two parameters
  SSL_CERTIFICATE_SOURCE and SESSION_SSL_CERTIFICATE_PROVIDED
  which are required for client authentication. The permanent
  fix/handling will be implemented on the next Fix Pack of HOD.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Host On-Demand users                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * HOD fails with COMM659 error when trying to connect with     *
  * TELNET-TLS protocol                                          *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  In TN3270E session using JSSE = Yes, Send a Certificate = No,
  HOD is failing to send a empty certificate with length of Zero
  resulting in null pointer exception error and COMM659 on the
  emulator.
  

Problem conclusion

• Code changes have been made to establish a secure connection for
  3270 display using HACL code without getting null pointer
  exception.
  
  Fix included in IBM Host On-Demand 14.0.3 Refresh Pack.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• HOD
  

Fix information

• Fixed component name

  HOD MVS

• Fixed component ID

  5733A5900

Applicable component levels

• RE00 PSY

     UP