Fixes are available
8.5.5.4: WebSphere Application Server V8.5.5 Fix Pack 4
8.5.5.5: WebSphere Application Server V8.5.5 Fix Pack 5
8.5.5.6: WebSphere Application Server V8.5.5 Fix Pack 6
8.5.5.7: WebSphere Application Server V8.5.5 Fix Pack 7
8.5.5.8: WebSphere Application Server V8.5.5 Fix Pack 8
8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21
APAR status
Closed as program error.
Error description
When making outbound SSL connection, some remote server may terminate the handshake because the TLS_EMPTY_RENEGOTIATION_INFO_SCSV cipher is not received. To avoid this problem, the user may create an SSL config that uses CUSTOM cipher suites, and includes the TLS_EMPTY_RENEGOTIATION_INFO_SCSV cipher in configuration. Currently the TLS_EMPTY_RENEGOTIATION_INFO_SCSV cipher is not included in the available cipher list.
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM WebSphere Application * * Server SSL connections. * **************************************************************** * PROBLEM DESCRIPTION: The TLS_EMPTY_RENEGOTIATION_INFO_SCSV * * CIPHER is not available for custom * * cipher configuration. * **************************************************************** * RECOMMENDATION: * **************************************************************** When making outbound SSL connection, some remote server may terminate the handshake because the TLS_EMPTY_RENEGOTIATION_INFO_SCSV cipher is not received. To avoid this problem, the user may create an SSL config that uses CUSTOM cipher suites, and includes the TLS_EMPTY_RENEGOTIATION_INFO_SCSV cipher in configuration. Currently the TLS_EMPTY_RENEGOTIATION_INFO_SCSV cipher is not included in the available cipher list.
Problem conclusion
Included the TLS_EMPTY_RENEGOTIATION_INFO_SCSV cipher in supported cipher list so that it can be selected for custom cipher configuration. The fix for this APAR is currently targeted for inclusion in fix pack 8.5.5.4. Please refer to the Recommended Updates page for delivery information: http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
Temporary fix
Comments
APAR Information
APAR number
PI20818
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
850
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2014-06-25
Closed date
2014-07-14
Last modified date
2014-07-14
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800
Applicable component levels
R850 PSY
UP
Document Information
Modified date:
28 April 2022