PH53661: WHEN RUNNING SYSTEM SSL TRACE FOR MQ CERTAIN ENTRIES DO NOT GIVE THE PEER IP ADDRESS FOR WHICH SSL/TLS FLOWS ARE CAPTURED

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• MQ Development finds the CHINIT should be enhanced to allow SSL
  trace to include the peer information in its trace
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 2 Modification 0 and                 *
  *                 Release 3 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: The Peer IP address incorrectly         *
  *                      displays as 00000000 in System SSL      *
  *                      trace for entries related to MQ         *
  *                      channels.                               *
  ****************************************************************
  The default implementation of the callback function
  io_getpeername provided by System SSL is not sufficient to
  format out the Peer IP Address in SSL/TLS trace which results in
  it being displayed as 00000000.
  

Problem conclusion

• An implementation of the callback function io_getpeername has
  been added so that the peer IP Address is now correctly
  formatted out and displayed in SSL/TLS trace.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI95289 UI95290

Modules/Macros

• CSQXGIOC CSQXGSSI
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R200 PSY UI95290

     UP24/02/14 P F402

• R300 PSY UI95289

     UP24/02/14 P F402

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.