PH56115: IBM DEVELOPER FOR Z V16.0.2 - AT-TLS IVP DAEMON RETURN EOC_RSE_ZEXPLORER_RULE~242 RC: 406 INITIAL HANDSHAKE 486 ERROR

APAR status

• Closed as program error.

Error description

• In IDz users run IVP (TLS enabled) for the Daemon.  The IVP
  return successfully with Exit code = 0, but it
  has error with ServerThread connection. For AT-TLS specifically,
  it returns EOC_RSE_Zexplorer_Rule~242 RC: 406
  Initial Handshake 486 error.
  
  Stack:
  0090  +FEK900I DAEMON IVP: Success
  0090  +FEK901I DAEMON IVP  Exit code = 0
  0090  EZD1287I TTLS Error RC:  406 Initial Handshake 486
  0090    LOCAL: ::ffff:x.xx.xxx.xxx..59000
  0090    REMOTE: ::ffff:x.xx.xxx.xxx..7736
  0090    JOBNAME: B620006 RULE: rule_rse_server
  0090    USERID: xxxx032 GRPID: 00000005 ENVID: 0000003D CONNID:
  0000AF34
  
  Workaround:
  None
  

Local fix

• NA
  

Problem summary

• In the second step connecting to ServerThread, IVP Daemon does
  not configure the gsk environment properly, causing the
  handshake and the connection failed.
  The first step in the test to connect to Daemon is working fine.
  

Problem conclusion

• IVP Daemon does not set up the gsk environment properly for the
  ServerThread connection test, causing the handshake and test
  failure. In AT-TLS mode, it was logged explicitly in syslog with
   the TTLS 406 error.
  By preparing a correct gsk environment for the ServerThread
  connection, the handshake and the connection to the ServerThread
  port is fine.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  EXP FOR Z/OS HO

• Fixed component ID

  5655EXP23

Applicable component levels