A fix is available
APAR status
Closed as program error.
Error description
Migrated to CICS TS 5.4 and started receiving. . DFHSO0123 Return code 406 received from function gsk_secure_socket_init of System SSL. Reason: An I/O error occurred. . DFHWB0732 CWXN CICS Web attach processing encountered a sockets I/O error while receiving a client request. . The problem has been introduced by work done during 5.4 development to make the CICS sockets domain 64-bit. The CICS SSL socket receive callback routine got changed and now will return -1 for all exception cases. Importantly this includes when a connection is closed. CICS should be returning 0 in that case (as it has done on all previous releases) instead of -1. We need to correct the connection closed behaviour for SSL connections. . Additional Symptom(s) Search Keyword(s): KIXREVDAM
Local fix
n/a
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users. * **************************************************************** * PROBLEM DESCRIPTION: Messages DFHSO0123 return code 406 and * * DFHWB0732 were given, when client * * immediately closes the SSL connection * * without sending any data. * **************************************************************** A TCPIPSERVICE is installed that specifies SSL(YES). DFHSOCK makes a call to receive SSL data. This returns sock_receive_buffer_n equal to 0 and sock_response equal to sock_exception because the client had immediately closed the SSL connection without sending any data. DFHSOSE handles the return to System SSL and sets the return value to -1. This causes System SSL to return GSK_ERR_IO (406), which CICS reports with a DFHSO0123 message. Additional Keywords: msgDFHSO0123 SO0123 msgDFHWB0732 WB0732
Problem conclusion
DHFSOCK and DFHSOSE have been changed to correctly return the number of bytes received, 0 to indicate connection closed or -1 for an error.
Temporary fix
Comments
APAR Information
APAR number
PI89854
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
100
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2017-11-06
Closed date
2018-02-26
Last modified date
2018-03-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI54062
Modules/Macros
DFHSOCK DFHSOSES
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
R100 PSY UI54062
UP18/02/28 P F802
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.4","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.4","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
01 March 2018