IBM Support

IBM Control Center (ICC) incorrectly displays list of Cipher Suites

Troubleshooting


Problem

The list of available and/or selected cipher suites shown for a given Connect:Direct monitored node differs from those seen directly on the node itself with e.g. Secure+ Admin Tool or spcli.sh/bat. This issue may arise in conjunction with Connect:Direct nodes being brought to version 6.0, whether as a new installation or by upgrading from an earlier release.

Resolving The Problem

Apply the fix for this issue, which has been made available in IBM Control Center v6.1.2.1 iFix01 and is obtainable from Fix Central here:

https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Control+Center&release=6.1.2.1&platform=All&function=all

 

Details of the fix from the fixlist:

 IT30437/MFT-10567 (2019-09-25)

Description of issue: The Connect:Direct Secure Plus ciphers presented in the ICC console [Configure servers -> Secure+ ] are incomplete with what is seen in SPCLI (Secure Plus Client). Control Center was only requests the cipher lists for SSL/TLS, but not for TLS1.1 and TLS1.2

Descripton of fix: Corrected the logic to request the cipher suites for all protocols (SSL/TLS/TLS1.1/TLS1.2).

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS9GLA","label":"IBM Control Center"},"Component":"","Platform":[{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"v6.1.0","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
17 December 2019

UID

ibm11087936