OA60397: HOD: 14.0.2 FTP FAILS WITH CERTIFICATE ERROR WHEN USING JSSE

IBM Host On-Demand 12.0.8

APAR status

• Closed as program error.

Error description

• Under HOD 14.0.2 and when attempting to use FTP/TLS with JSSE
  enabled user gets a certificate error even though the
  certificate required is in the MSIE browser KeyStore and the
  option to use that KeyStore is enabled. If JSSE is disabled,
  user is able to make a connection. User needs to have TLS v1.2
  but that is only supported when using JSSE.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Host On-Demand users                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * FTP fails with Certificate error when using JSSE             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Steps to reproduce:
  
  In TN3270 FTP session, Use JSSE = Yes, MSIE browser keyring =
  yes. As per the current implementation of HOD FTP session, it is
  failing to read certificate from intermediate store to establish
  the connection and fails to transfer huge folder (maclib) with
  low configuration machine.
  

Problem conclusion

• Code changes have been made to connect to FTP session with JSSE
  and without JSSE keeping certificate in Windows keystore
  (intermediate stores) and huge folder transfer using HOD FTP in
  low configuration machine.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• FTP
  

Fix information

• Fixed component name

  HOD MVS

• Fixed component ID

  5733A5900

Applicable component levels

• RE00 PSY

     UP