IJ33773: SSLV2HELLO IS NOT ENABLED AFTER APPLYING IBMJRE 8.0.6.25

APAR status

• Closed as program error.

Error description

• Error Message:
  javax.net.ssl<PIPE>SEVERE<PIPE>7D<PIPE>HTTP_Adapter-TLS-Thread-1
  4<PIPE>2021-05-24 07:04:49.699
  EDT<PIPE>Thread.java:1164<PIPE>Fatal (HANDSHAKE_FAILURE):
  SSLv2Hello is not enabled (
  > "throwable" : {
  > javax.net.ssl.SSLHandshakeException: SSLv2Hello is not
  enabled
  > <TAB>at com.ibm.jsse2.ai.l(ai.java:76)
  > <TAB>at com.ibm.jsse2.ai.j(ai.java:127)
  > <TAB>at com.ibm.jsse2.ai.b(ai.java:19)
  > <TAB>at com.ibm.jsse2.aZ.a(aZ.java:44)
  > <TAB>at com.ibm.jsse2.bf.g(bf.java:12)
  > <TAB>at com.ibm.jsse2.bf.f(bf.java:216)
  > <TAB>at com.ibm.jsse2.bf.e(bf.java:14)
  > <TAB>at com.ibm.jsse2.bf.unwrap(bf.java:31
  .
  Stack Trace: N/A
  .
  

Local fix

Problem summary

• Add support for SSLv2Hello. It allows the ability to send
  SSLv3, TLSv1, TLSv1.1 and TLSv1.2 ClientHellos encapsulated in
  an SSLv2 format hello by using the SSLv2Hello psuedo-protocol.
  SSLv2Hello pseudo-protocol is disabled by default.
  

Problem conclusion

• Binary affected - ibmjsseprovider2.jar
  GIT Issue - #162
  RTC - 145626
  Build - 8.0 build_20210701--311
  JVM to be delivered in - JDK 8 SR7
  .
  This APAR will be fixed in the following Java Releases:
   8 SR7 (8.0.7.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels