SSL PERFORMANCE AND SCALABILITY ENHANCEMENTS - SSLSERV MODULE UPDATES


 
 APAR Identifier ...... PK97438      Last Changed ........ 11/11/04
 SSL PERFORMANCE AND SCALABILITY ENHANCEMENTS - SSLSERV MODULE
 UPDATES
 
 Symptom ...... NF NEWFUNCTION       Status ........... CLOSED  UR1
 Severity ................... 4      Date Closed ......... 10/08/06
 Component .......... 5735FAL00      Duplicate of ........
 Reported Release ......... 540      Fixed Release ............ 999
 Component Name TCP/IP V2 FOR V      Special Notice       ATTENTION
 Current Target Date ..              Flags
 SCP ...................                            NEW FUNCTION
 Platform ............
 
 Status Detail: SHIPMENT - Packaged solution is available for
                           shipment.
 
 PE PTF List:
 
 PTF List:
 Release 540   : UK59535 available 10/08/18 (1102 )
 Release 610   : UK59536 available 10/08/18 (1101 )
 
 Parent APAR:
 Child APAR list:
 
 ERROR DESCRIPTION:
 SSL server performance and scalability enhancements.
 
 LOCAL FIX:
 Not Applicable.
 
 PROBLEM SUMMARY:
 ****************************************************************
 * USERS AFFECTED: All users of the z/VM SSL server.            *
 ****************************************************************
 * PROBLEM DESCRIPTION:                                         *
 ****************************************************************
 * RECOMMENDATION: APPLY PTF                                    *
 ****************************************************************
 
 PROBLEM CONCLUSION:
 
 TEMPORARY FIX:
 
 COMMENTS:
 With this APAR and its associated requisites (listed below),
 TCP/IP for z/VM provides significant performance and
 scalability enhancements for the CMS-based SSL server,
 introduced with z/VM version 5 release 4.
 
 This APAR provides an updated SSL server module (SSLSERV) that
 incorporates changes that are intrinsic to the provision of
 enhanced server performance capabilities.
 
 Detailed information about these enhancements, their use, and
 system and configuration changes required to install these
 updates, can be found at this z/VM web site URL:
 
   http://www.vm.ibm.com/related/tcpip/vmsslinf.html
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 IMPORTANT NOTES:
 ----------------
 
 1) The following APARs must also be applied in conjunction with
    this APAR:
 
    TCP/IP APARs:
    APAR     Description
    -------  ---------------------------------------------------
    PK97437  SSL Server Performance and Scalability Enhancements
             - Packaging Updates
    PK75662  SSL Server Performance and Scalability Enhancements
             - TCPIP Module Updates
 
    CMS APARs:
    APAR     Description
    -------  ---------------------------------------------------
    VM64740: Fix ABENDs in CMS Queue Management in a DCSS and
             add STFL to CMS Initialization
 
 2) CP directory updates that define additional TCP/IP user IDs
    are *REQUIRED* before the service updates associated with
    this and the above-listed APARs are placed into production
    on a z/VM system (that is *before* the PUT2PROD or TCP2PROD
    commands are used).
 
 3) DTCPARMS and other TCP/IP configuration file changes are
    *REQUIRED* before the service updates associated with this
    and the above-listed APARs are placed into production on a
    z/VM system (that is *before* the PUT2PROD or TCP2PROD
    commands are used).
 
 4) If the SSL server is not configured for use by an
    installation, the changes cited in (2) and (3) above
    are not required.
 
 NOTE!:  If the SSL server *IS* configured for use and the
 
         necessary changes are not implemented, the SSL server
         will not properly initialize and will not function.
 
 Symptoms indicative of a lack of the required changes will be
 reflected in the SSL and TCP/IP server consoles, represented by
 these examples.  Note that messages different from those shown
 here might be produced, based on the system configuration that
 is in place:
 
 ---------------------------------------------------------------
 SSL Server:
 
  ...
  DTCRUN1005E Required tag :DCSS_Parms. was not found in
              file(s): <nodeID> DTCPARMS D1, IBM DTCPARMS D1
  DTCRUN1099E Server not started - correct problem and retry
  ...
 
  --OR--
 
  ...
  DTCRUN1041E A server of class SSL_DCSS_AGENT is not defined
              for SSLSERV in files: <nodeID> DTCPARMS D1, IBM
              DTCPARMS D1
  DTCRUN1099E Server not started - correct problem and retry
  ...
 
 ---------------------------------------------------------------
 TCP/IP Server:
 
  ...
  DTCRUN1038I Server is not configured to support secure
              connections
  ...
  DTCPAR219I SSLServerID: SSLSERV; Timeout: 30
  ...
  DTCIPI056I TCP/IP is configured to not allow an SSL server.
             The SSLSERVERID statement is ignored.
  ...
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 The z/VM 5.4.0 publications (cited below) are affected by
 these enhancements:
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Planning and Customization
 Order Number         SC24-6125
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP User's Guide
 Order Number         SC24-6127
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Messages and Codes
 
 Order Number         GC24-6124
 
 ---------------------------------------------------------------
 Publication Title:   TCP/IP Diagnosis Guide
 Order Number         GC24-6123
 
 ---------------------------------------------------------------
 Publication Title:   z/VM: Performance
 Order Number         SC24-6109
 
 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 Topical and specific content updates for these publications
 can be found at this z/VM web site URL:
 
   http://www.vm.ibm.com/related/tcpip/vmsslinf.html
 
  **** PE10/12/09 FIX IN ERROR. SEE APAR PM28594  FOR DESCRIPTION
  **** AE11/05/25 FIX IN ERROR. SEE APAR PM40046  FOR DESCRIPTION
 
 MODULES/MACROS:   SSLADMIN SSLADMIO SSLCACHE SSLCDEFS SSLCIPHS
 SSLCONFG SSLCTLIO SSLDPUMP SSLDSPTC SSLFLBUF SSLGSKCF SSLMESGS
 SSLMNTOR SSLREPRT SSLSCBEX SSLSERV  SSLSTART SSLTCPIF SSLTOOLS
 SSLTRACE SSLTRSIT TCPBLP91
 
 SRLS:      SC24612505 SC24612704 GC24612404 GC24612303
 SC24610906
 
 RTN CODES:
 
 CIRCUMVENTION:
 
 MESSAGE TO SUBMITTER: