IT38163: MULTIPLE CIPHERS OR MACS CANNOT BE SPECIFIED ON AN FTPSERVER POLICY USING A PLUS CHARACTER AS THE SEPARATOR IN ACE

APAR status

• Closed as program error.

Error description

• An FTPServer policy allows an administrator to specify a list of
  encryption ciphers or message authentication code algorithms
  which should be allowed when communicating with an SFTP server.
  The documentation for these fields states that multiple values
  should be separated using a plus sign (+). Attempting to use
  such a policy will result in a BIP3380 error at runtime stating
  that the MAC or CIPHER is not supported by the server.
  

Local fix

• Use commas instead of plus signs as the separator. No spaces
  should be used to pad the values.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of FTPServer policy connecting to SFTP servers in IBM
  App Connect Enterprise.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  An FTPServer policy allows an administrator to specify a list of
  encryption ciphers or message authentication code algorithms
  which should be allowed when communicating with an SFTP server.
  The documentation for these fields states that multiple values
  should be separated using a plus sign (+). Attempting to use
  such a policy will result in a BIP3380 error at runtime stating
  that the MAC or CIPHER is not supported by the server.
  

Problem conclusion

• Multiple ciphers or message authentication codes can be
  specified in an FTPServer as documented.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v11.0      11.0.0.15
  v12.0      12.0.2.0
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  APP CONNECT ENT

• Fixed component ID

  5724J0550

Applicable component levels