PH46566: TLSV1.3 FAILBACK FOR THIN CLIENT

APAR status

• Closed as new function.

Error description

• Add support for TLSv1.3 failback with thin client.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Problem seen on admin client or thin    *
  *                      clients using a non-IBM JVM.  The SSL   *
  *                      protocol code was falling back to       *
  *                      SSL_TLSv2.                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When admin or thin clients running on non-IBM JVMs may fall
  back to a SSL protocol if the configured protocol is not
  usable.  The fallback protocol was SSL_TLSv2 which is also not
  honored on a non-IBM JVM
  

Problem conclusion

• Change the fallback protocol to a value that can be used by
  most JVMs, TLSv1.2, when using a non-IBM JVM.
  
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.22 and 9.0.5.13. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels