A fix is available
APAR status
Closed as program error.
Error description
When a channel is defined to be LIKE another channel and inherits its CERTLABL attribute without being explicitly set by the DEFINE command then we do not correctly recognize that the certificate label cache needs to be updated. This forces the customer to issue a "Refresh Security Type(ssl)" command to get the cache in sync.
Local fix
Define the channel without using the LIKE parameter (all other parameters would need to be provided), or after creating the channel, if you use the ALTER CHL command to reset the CERTLABL attribute then this should force a rebuild of the label cache.
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM MQ for z/OS Version 9 * * Release 2 Modification 0 and Release 3 * * Modification 0. * **************************************************************** * PROBLEM DESCRIPTION: When creating a new channel with a * * CERTLABL attribute to use a non-default * * SSL certificate, the CERTLABL is being * * ignored if the channel has been defined * * using the LIKE parameter unless a * * "Refresh Security Type(SSL)" command is * * issued. * **************************************************************** The code which handles the defining of a new channel using the LIKE parameter was not informing the channel initiator that the CERTLABL attribute needed to be applied to the new channel. Therefore the new channel was not being added to the cache of channel names and their respective CERTLABL names.
Problem conclusion
The code has been changed to inform the channel initiator that the CERTLABL attribute needs to be applied to the new channel. As a result, the cache is being correctly updated and the CERTLABL on the new channel is not being ignored so a "Refresh Security Type(SSL)" command is not required.
Temporary fix
Comments
APAR Information
APAR number
PH50046
Reported component name
IBM MQ Z/OS V9
Reported component ID
5655MQ900
Reported release
200
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2022-10-06
Closed date
2023-03-20
Last modified date
2023-05-02
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI91031 UI91032
Modules/Macros
CSQMCNAC
Fix information
Fixed component name
IBM MQ Z/OS V9
Fixed component ID
5655MQ900
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"200","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
03 May 2023