PM90108: GSK RETURN CODE 428 IS INTERPRETED AS AN UNRECOGNIZED RETURN CODE BY CICS ON THE DFHSO0123 ERROR MESSAGE.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The SSL GSK return code 428 states: GSK_ERROR_NO_PRIVATE_KEY
  CICS treats this as an unrecognized return code which causes a
  dump.
  
  CICS should interpret this return code for what it is an act
  accordingly. In this case, CICS should only issue the
  DFHSO0123 error message should return a better error message
  stating No Private Key.
  
  Additional Symptom(s) Search Keyword(s): KIXREVDAM
  RC428
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: Gsk return code 428 is interpreted as   *
  *                      an unrecognized return code by CICS on  *
  *                      the DFHSO0123 error message.            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  CICS is setup with SSL. But ICSF service is unavailable (the
  ICSF started task is not started) before CICS SSL activity is
  started. That causes system SSL returned with response code
  428. CICS treats the 428 as an unrecognized return code and
  issues message DFHSO0123 to report error codes.
  
  The response code 428 means certificate does not contain a
  private key or the private key is unusable.
  
  In addition, msgDFHSO0002 code x'080C' is issued and a system
  dump is taken. This is unnecessary for this type of error.
  
  Additional Keywords: msgDFHSO0123  SO0123  DFHSO0002  SO0002
  

Problem conclusion

• DFHSOSE has been changed to issue message DFHSO1023 with the
  correct description. The msgDFHSO0002 code x'080C' is not
  issued and a system dump is not taken.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM90524 UK95960

Modules/Macros

•    DFHSOSE
  

Fix information

• Fixed component name

  CICS TS Z/OS V4

• Fixed component ID

  5655S9700

Applicable component levels

• R700 PSY UK95960

     UP13/07/25 P F307

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.