PH31169: ADJUST SSL0200E WITH GSK_ERROR_PROTOCOL_MISMATCH

APAR status

• Closed as program error.

Error description

• SSL0200E may be issued with an error of
  "GSK_ERROR_PROTOCOL_MISMATCH" at error level
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server with SSL0200E  *
  *                  being logged. Not applicable to z/OS.       *
  ****************************************************************
  * PROBLEM DESCRIPTION: When a client sends messages with a     *
  *                      protocol other than what's been         *
  *                      negotiated, a generic SSL0200E is       *
  *                      issued.                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Early in the handshake, the client and server agree on a TLS
  protocol level to use.  Each subsequent message is framed for
  that negotiated protocol version.
  Some clients have defects where messages use a different
  protocol version which causes the connection to terminate.
  Because the protocol version of each message cannot easily be
  logged/debugged, a unique error code should be used.
  

Problem conclusion

• The code was updated to add a new error code, SSL00286I.
  
  "Client sent an TLS message with an unexpected protocol during
  handshake";
  
  The fix for this APAR is targeted for inclusion in IBM HTTP
  Server fix packs 8.5.5.20 and 9.0.5.7. For more information,
  see 'Recommended Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM HTTP SERVER

• Fixed component ID

  5724J0801

Applicable component levels