PH48864: NUMEROUS DFHSO1002 MESSAGES BEING ISSUED FOR A CLOSED CONNECTION, AFTER IMPLEMENTING ATTLSAWARE FOR A TCPIPSERVICE.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Many clients had connected and then immediately
  disconnected without ever performing a handshake. Some of
  these connections have caused the CICS listener to be
  notified of the new connection, but not all of them.
  
  As the connections arrive on a TCPIPSERVICE defined as
  ATTLSAWARE, CICS makes an SIOCTTLSCTL call to obtain the
  AT-TLS state for this connection. The call fails because
  the client has already closed the connection. CICS issues
  message DFHSO1002 to report the failure.
  
  The IP address insert is UNKNOWN because CICS is unable
  to obtain it.
  
  Issuing a DFHSO1002 message for a closed connection with an
  IP address of 'UNKNOWN' isn't helpful and the intention of
  this APAR is to stop such messages being written to the log.
  
  DFHSO1002 date time applid CICS is unable to determine the
  secure state of a new connection received on ATTLSAWARE
  
           TCPIPSERVICE tcpipservice from client IP address
  
   UNKNOWN. UNIX System Services values returned
  
       are bpx_return_value( -1 ),
  
       bpx_return_code( 1,124 ),
  
       and bpx_reason_code( X'77B77221' ).
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: Numerous DFHSO1002 messages with        *
  *                      UNKNOWN IP address are written to the   *
  *                      CICS logs.                              *
  ****************************************************************
  When a new connection arrives in CICS on an ATTLSAWARE
  TCPIPSERVICE, CICS obtains information related to the
  connection.
  
  If the call fails because the client has already closed the
  connection CICS issues message DFHSO1002 to report the
  failure.
  
  The DFHSO1002 message has an insert of IP address UNKNOWN
  because the connection is closed. This is not a very useful
  message and can appear many times in the logs.
  written to the logs.
  

Problem conclusion

• Message DFHSO1002 is not issued if the connection has been
  closed.
  

Temporary fix

Comments

• ×**** PE23/05/26 FIX IN ERROR. SEE APAR PH54767  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PH51099 UI83807 UI83808

Modules/Macros

• DFHSOLS
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R200 PSY UI83808

     UP22/12/22 P F212

• R300 PSY UI83807

     UP22/12/21 P F212

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.