SSL PERFORMANCE AND SCALABILITY ENHANCEMENTS - SSLSERV MODULE UPDATES
APAR Identifier ...... PK97438 Last Changed ........ 11/11/04 SSL PERFORMANCE AND SCALABILITY ENHANCEMENTS - SSLSERV MODULE UPDATES Symptom ...... NF NEWFUNCTION Status ........... CLOSED UR1 Severity ................... 4 Date Closed ......... 10/08/06 Component .......... 5735FAL00 Duplicate of ........ Reported Release ......... 540 Fixed Release ............ 999 Component Name TCP/IP V2 FOR V Special Notice ATTENTION Current Target Date .. Flags SCP ................... NEW FUNCTION Platform ............ Status Detail: SHIPMENT - Packaged solution is available for shipment. PE PTF List: PTF List: Release 540 : UK59535 available 10/08/18 (1102 ) Release 610 : UK59536 available 10/08/18 (1101 ) Parent APAR: Child APAR list: ERROR DESCRIPTION: SSL server performance and scalability enhancements. LOCAL FIX: Not Applicable. PROBLEM SUMMARY: **************************************************************** * USERS AFFECTED: All users of the z/VM SSL server. * **************************************************************** * PROBLEM DESCRIPTION: * **************************************************************** * RECOMMENDATION: APPLY PTF * **************************************************************** PROBLEM CONCLUSION: TEMPORARY FIX: COMMENTS: With this APAR and its associated requisites (listed below), TCP/IP for z/VM provides significant performance and scalability enhancements for the CMS-based SSL server, introduced with z/VM version 5 release 4. This APAR provides an updated SSL server module (SSLSERV) that incorporates changes that are intrinsic to the provision of enhanced server performance capabilities. Detailed information about these enhancements, their use, and system and configuration changes required to install these updates, can be found at this z/VM web site URL: http://www.vm.ibm.com/related/tcpip/vmsslinf.html +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ IMPORTANT NOTES: ---------------- 1) The following APARs must also be applied in conjunction with this APAR: TCP/IP APARs: APAR Description ------- --------------------------------------------------- PK97437 SSL Server Performance and Scalability Enhancements - Packaging Updates PK75662 SSL Server Performance and Scalability Enhancements - TCPIP Module Updates CMS APARs: APAR Description ------- --------------------------------------------------- VM64740: Fix ABENDs in CMS Queue Management in a DCSS and add STFL to CMS Initialization 2) CP directory updates that define additional TCP/IP user IDs are *REQUIRED* before the service updates associated with this and the above-listed APARs are placed into production on a z/VM system (that is *before* the PUT2PROD or TCP2PROD commands are used). 3) DTCPARMS and other TCP/IP configuration file changes are *REQUIRED* before the service updates associated with this and the above-listed APARs are placed into production on a z/VM system (that is *before* the PUT2PROD or TCP2PROD commands are used). 4) If the SSL server is not configured for use by an installation, the changes cited in (2) and (3) above are not required. NOTE!: If the SSL server *IS* configured for use and the necessary changes are not implemented, the SSL server will not properly initialize and will not function. Symptoms indicative of a lack of the required changes will be reflected in the SSL and TCP/IP server consoles, represented by these examples. Note that messages different from those shown here might be produced, based on the system configuration that is in place: --------------------------------------------------------------- SSL Server: ... DTCRUN1005E Required tag :DCSS_Parms. was not found in file(s): <nodeID> DTCPARMS D1, IBM DTCPARMS D1 DTCRUN1099E Server not started - correct problem and retry ... --OR-- ... DTCRUN1041E A server of class SSL_DCSS_AGENT is not defined for SSLSERV in files: <nodeID> DTCPARMS D1, IBM DTCPARMS D1 DTCRUN1099E Server not started - correct problem and retry ... --------------------------------------------------------------- TCP/IP Server: ... DTCRUN1038I Server is not configured to support secure connections ... DTCPAR219I SSLServerID: SSLSERV; Timeout: 30 ... DTCIPI056I TCP/IP is configured to not allow an SSL server. The SSLSERVERID statement is ignored. ... +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ The z/VM 5.4.0 publications (cited below) are affected by these enhancements: --------------------------------------------------------------- Publication Title: TCP/IP Planning and Customization Order Number SC24-6125 --------------------------------------------------------------- Publication Title: TCP/IP User's Guide Order Number SC24-6127 --------------------------------------------------------------- Publication Title: TCP/IP Messages and Codes Order Number GC24-6124 --------------------------------------------------------------- Publication Title: TCP/IP Diagnosis Guide Order Number GC24-6123 --------------------------------------------------------------- Publication Title: z/VM: Performance Order Number SC24-6109 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Topical and specific content updates for these publications can be found at this z/VM web site URL: http://www.vm.ibm.com/related/tcpip/vmsslinf.html **** PE10/12/09 FIX IN ERROR. SEE APAR PM28594 FOR DESCRIPTION **** AE11/05/25 FIX IN ERROR. SEE APAR PM40046 FOR DESCRIPTION MODULES/MACROS: SSLADMIN SSLADMIO SSLCACHE SSLCDEFS SSLCIPHS SSLCONFG SSLCTLIO SSLDPUMP SSLDSPTC SSLFLBUF SSLGSKCF SSLMESGS SSLMNTOR SSLREPRT SSLSCBEX SSLSERV SSLSTART SSLTCPIF SSLTOOLS SSLTRACE SSLTRSIT TCPBLP91 SRLS: SC24612505 SC24612704 GC24612404 GC24612303 SC24610906 RTN CODES: CIRCUMVENTION: MESSAGE TO SUBMITTER: