AMPX036I KEY MISMATCH IN TCP CONNECTION TREE NODE


 
 STAT= CLOSED  PER  FESN0461035-     CTID= EN0313 ISEV= 3
 SB19/01/25  RC19/01/25  CL19/02/11  PD           SEV= 3
                      PE=                       TYPE= F
 RCOMP= 5735FAL00    TCP/IP FOR Z/VM RREL= R640
 FCOMP= 5735FAL00    TCP/IP FOR Z/VM PFREL= F999  TREL= T
 ACTION=             SEC/INT= N                   DUP/
 USPTF= UI61234      PDPTF=                       DUPS 0
 DW19/01/25  RT19/01/25  SC          FT          RE
 PT          UP          LP          PV          AP
 EN          FL          LC19/02/20  RU19/02/20  OT
 CT          FR          TD          TYPE OF SOLUTION=
 PROJECTED CLOSE CODE=        CUST INST LVL/SU=
 FAILING MODULE= T6PSSL       FAILING LVL/SU= 640
 SYSROUTE OF:          RET APAR=             PS=
 STATUS DETAIL= SHIPMENT        RELIEF AVAILABLE=
 COMP OPER ENV=  640
 
              N
 
        N                                        SCP/
 F/                                  TYPE OF SOLUTION=
 PROJECTED CLOSE CODE=        CUST INST LVL/SU=
 FAILING MODULE=              FAILING LVL/SU=
 SYSROUTE OF:          RET APAR=      N      PS=
 STATUS DETAIL=   N N N N N     RELIEF AVAILABLE=
 COMP OPER ENV=
 
 SYSRES=      SYSIN=      SYSOUT=      CPU=             RE-IPL=
 OPTYPE=                 SPECIAL ACTIVITY=          REGRESSION=
 PRE-SCREEN NO.=          RSCP= RS640
 ERROR DESCRIPTION:
 TCPIP issues intermittent messages, without having an impact
 to the server or application:
 
 AMPX036I ASSERTION FAILURE CHECKING ERROR
       TRACE BACK OF CALLED ROUTINES
  ROUTINE                          STMT AT ADDRESS IN MODULE
  CHECKTREEVISITNODE                 59    00DC2E42   TCTREEP
  NLTreeTr                           98    00DF5B10
  CHECKTREE                           9    00DC3200   TCTREEP
  TREECONSISTENCY                     2    00DC3B86   TCTREEP
  CONSISTENCYCHECKER                 95    00BF2140
                                     TCCONSI_CONSISTENCY CHECKER
 
  Schedule                         2082    00C8CC4C
  <MAIN-PROGRAM>                     14    00BC61FE   TCPIP
  VSPASCAL                                 00E1EBD2
 CheckTreeVisitNode: Comparison of actual and correct keys yields
 -1 on tree TCP connections, WhichTraverse 1
 Actual key:
 DTCEEP002I 00000000178700000000FFFF0000000000000000
 Correct key:
  DTCEEP002I 099B01CA9DD6099B01CA9DD70000000000000000
 AMPX036I ASSERTION FAILURE CHECKING ERROR
       TRACE BACK OF CALLED ROUTINES
  ROUTINE                          STMT AT ADDRESS IN MODULE
  CHECKTREEVISITNODE                 59    00DC2E42   TCTREEP
  TRAVERSE                            8    00DBFDC8   TCTREEP
  TRAVERSE                            7    00DBFD92   TCTREEP
  TRAVERSE                           11    00DBFDF2   TCTREEP
  NORMALTRAVERSE                      5    00DBFEC6   TCTREEP
  CHECKTREE                          16    00DC3340   TCTREEP
  TREECONSISTENCY                     2    00DC3B86   TCTREEP
  CONSISTENCYCHECKER                 95    00BF2140
                                           TCCONSI_CONSISTENCY
                                                      CHECKER
  Schedule                         2082    00C8CC4C
  <MAIN-PROGRAM>                     14    00BC61FE   TCPIP
  VSPASCAL                                 00E1EBD2
 CheckTreeVisitNode: Comparison of actual and correct keys yields
 -1 on tree TCP connections, WhichTraverse 1
 Actual key:
 DTCEEP002I 00000000178700000000FFFF0000000000000000
 Correct key:
 DTCEEP002I 099B01CA9DD6099B01CA9DD70000000000000000
 LOCAL FIX:
 local fix is available via PMR
 
 PROBLEM SUMMARY:
 ****************************************************************
 * USERS AFFECTED: All users of z/VM TCPIP that secure          *
 *                 connections using the TLS/SSL server.        *
 ****************************************************************
 * PROBLEM DESCRIPTION:                                         *
 ****************************************************************
 * RECOMMENDATION: APPLY PTF                                    *
 ****************************************************************
 Through the process of securing connections, certain fields in
 the key used for the TCP connection tree may be changed thus
 invalidating the key.  In this case, the tree node is deleted
 and added back into the tree with the new key.
 
 Some places that invalidated the key, failed to remove the
 node from the TCP connection tree.  In this case, when
 consistency checking kicks off to check the tree,  assertion
 failures are flagged that are similar to this:
 
 AMPX036I ASSERTION FAILURE CHECKING ERROR
       TRACE BACK OF CALLED ROUTINES
  ROUTINE                          STMT AT ADDRESS IN MODULE
 CHECKTREEVISITNODE                 59    00DC2E42   TCTREEP
 NLTreeTr                           98    00DF5B10
 CHECKTREE                           9    00DC3200   TCTREEP
 TREECONSISTENCY                     2    00DC3B86   TCTREEP
 CONSISTENCYCHECKER                 95    00BF2140
 Schedule                         2082    00C8CC4C
 <MAIN-PROGRAM>                     14    00BC61FE   TCPIP
 VSPASCAL                                 00E1EBD2
 
 CheckTreeVisitNode: Comparison of actual and correct keys yields
 -1 on tree TCP connections, WhichTraverse 1
 Actual key:
 DTCEEP002I 00000000178700000000FFFF0000000000000000
 Correct key:
 DTCEEP002I 093C1C669DD6093C1C669DD70000000000000000
 PROBLEM CONCLUSION:
 Module T6PSSL has been updated to make sure all places that
 invalidate the key for a TCP connection tree node, remove the
 node from the tree and add it back in with the new key if
 needed.
 TEMPORARY FIX:
 COMMENTS:
 MODULES/MACROS:
 TCTREEP  TCUTIL   T6PSSL
 SRLS:
 NONE
 RTN CODES:
 APPLICABLE COMPONENT LEVEL/SU:
 R640 PSY UI61234 UP19/02/20 I      1000
 R710 PSY UI61235 UP19/02/20 I      1000
 CIRCUMVENTION:
 MESSAGE TO SUBMITTER: