PI89000: DFHSO0123 RETURN CODE 446 RECEIVED REASON: TLS VERSION MISMATCH

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• This apar is opened to change the following DFHSO0123
  Return code 446, its reasson text from 'TLS version mismatch'
  to 'TLS extension mismatch'.
  DFHSO0123 mm/dd/yyyy hh:mm:ss  Return code 446 received
  from function gsk_secure_socket_init  of System SSL.
  Reason: TLS version mismatch. Peer: xxx.xxx.xxx.xxx,
  TCPIPSERVICE: *NONE*.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: The reason text of message DFHSO0123    *
  *                      return code 446 is incorrect.           *
  ****************************************************************
  * RECOMMENDATION: .                                            *
  ****************************************************************
  The reason text of message DFHSO0123 return code 446 is 'TLS
  version mismatch'. According to z/OS Knowledge Center, SSL
  function return code 446 means TLS extension mismatch has been
  encountered. Therefore, the reason text of message DFHSO0123
  return code 446 should be changed to 'TLS extension mismatch'
  for consistency.
  

Problem conclusion

• DFHMESOE has been changed to make sure the reason text of
  message DFHSO0123 return code 446 is 'TLS extension mismatch'.
  
  The CICS Transaction Server for z/OS Version 5 Release 3 CICS
  Messages and Codes Vol 2, manual should be changed in the
  description of message DFHSO0123 as follows: change the key
  words "TLS version mismatch" to "TLS extension mismatch"and
  change the line "47=TLS version mismatch" to "47=TLS
  extension mismatch".
  
  The same change should be made to the CICS Transaction Server
  for z/OS Version 5 Release 4 CICS Messages and Codes Vol 2,
  manual.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI53364 UI53365

Modules/Macros

• DFHMESOC DFHMESOE DFHMESOK
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI53364

     UP18/01/23 P F801

• R100 PSY UI53365

     UP18/01/23 P F801

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.