PH49364: ADD INFORMATIONAL MESSAGE ASSOCIATED WITH THE CSQX636E MESSAGE TO PROVIDE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Due to changes in SystemSSL  :   SERIALNUMBERs are now much
  longer than they used to be and the limited space of the insert
  is insufficient in some cases.
  Currently it is not guaranteed that you would see the
  mismatched attribute, more information, likely including the
  CN, may not be visible.
  This APAR is being taken to explore MQ putting out an
  additional informational message associated with the CSQX636E
  message containing the peer attribute that has failed to match
  which may include displaying  the contents of the "CN=....."
  attribute.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 2 Modification 0 and                 *
  *                 Release 3 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: When CSQX636E is issued to report a     *
  *                      mismatch between the SSLPEER and        *
  *                      certificate distinguished name (DN),    *
  *                      only the first 45 bytes, starting with  *
  *                      'SERIALNUMBER=' are shown.              *
  *                                                              *
  *                      The truncation of the remainder of the  *
  *                      DN to 30 bytes or less can make it      *
  *                      difficult to identify the certificate   *
  *                      associated with the error.              *
  ****************************************************************
  When displaying the DN in message CSQX636E, the maximum length
  shown is 48 bytes. When the DN is longer than this, the
  first 45 bytes are shown, followed by '...' to indicate
  truncation.
  

Problem conclusion

• The maximum DN length that can be displayed in message CSQX636E
  has been increased to 254 bytes. When the DN is longer, the
  first 251 bytes are shown, followed by '...' to indicate
  truncation.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI94325 UI94326 UI94327 UI94328 UI94329 UI94330 UI94331 UI94332
  UI94333 UI94334 UI94335 UI94336

Modules/Macros

• CSQFPMS2 CSQFPMSG CSQFXTXC CSQFXTXE CSQFXTXF CSQFXTXK CSQFXTXU
  CSQUMSG  CSQXMSG  CSQXRPLY
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R200 PSY UI94331

     UP23/11/15 P F311

• R201 PSY UI94332

     UP23/11/15 P F311

• R202 PSY UI94333

     UP23/11/15 P F311

• R203 PSY UI94334

     UP23/11/15 P F311

• R204 PSY UI94335

     UP23/11/15 P F311

• R205 PSY UI94336

     UP23/11/15 P F311

• R300 PSY UI94325

     UP23/11/15 P F311

• R301 PSY UI94326

     UP23/11/15 P F311

• R302 PSY UI94327

     UP23/11/15 P F311

• R303 PSY UI94328

     UP23/11/15 P F311

• R304 PSY UI94329

     UP23/11/15 P F311

• R305 PSY UI94330

     UP23/11/15 P F311

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.