PK44825: ABEND 878-10 MSGDFHSO0002 SEVERE ERROR CODE X'080C' IN MODULE DFHSOSE RECEIVED ON A GSK_SECURE_SOCKET_INIT FAILURE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• ABEND 878-10 MSGDFHSO0002 severe error code x'080C' in module
  DFHSOSE is received on a gsk_secure_socket_init failure.
  The abend878 dump, showed excessive getmains for x'2000' bytes
  in Subpool2 Key8 storage. It filled up above the line,
  overflowing to below until region ran out of MVS private
  storage.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: MVS abend 878 when CICS uses SSL.       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  A CICS region using a TCPIPservice with SSL Clientauth specified
  receives a request but during the socket handshake process, the
  connection is terminated. The termination occurs after the
  socket has been opened but before initialisation. During socket
  open (gsk_secure_socket_open), SSL obtains a GSKSOC buffer This
  buffer is only released if a gsk_secure_socket_close call is
  made to SSL. If the socket connection is terminated before the
  init call then there is no gsk_secure_socket_close call made.
  This then leaves the storage orphaned. If this occurs enough
  times then an MVS abend 878 causes CICS to terminate.
  Additional keywords: abend878 x'080C' DFHSOSE GSK_ERROR
             DFHSO0002 msgDFHSO0123 DFHSO0123 SYSTEM_SSL_ERROR
  

Problem conclusion

• DFHSOSK has been changed in routine sosk_secure_soc_init to set
  ssl_handle after a succesful gsk_secure_socket_open instead of
  after gsk_secure_socket_init. This will ensure that a call is
  always made to gsk_secure_socket_close to release any SSL
  getmained storage when terminating a connection.
  

Temporary fix

•             *********
              * HIPER *
              *********
  FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK26018 UK26019 PK49022

Modules/Macros

•    DESSOSE  DFHLEPT@ DFHSOSK
  

Fix information

• Fixed component name

  CICSTS 3.X Z/OS

• Fixed component ID

  5655M1500

Applicable component levels

• R403 PSY UK26019

     UP07/06/16 P F706

• R400 PSN UP

     AK44825

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.