IT05254: REDHAT UPDATE SHARED INFRASTRUCTURE SERVICE COMMUNICATION ERROR:SSLERROR: SSLV3 ALERT HANDSHAKE FAILURE

IBM PureApplication System Version 2.0.0.1

APAR status

• Closed as program error.

Error description

• Customers deploying the Red Hat Update Infrastructure
  (RHUI) Shared service encounter the following error due to a
  recent security vulnerability flash published by Red Hat:
  
  RHUI Communication error with: SSLError: sslv3 alert handshake
  failure
  
  The issue is related to the recent  Poodle SSLV3 Vulnerability.
  https://access.redhat.com/articles/1232123
  
  The following SSL communication error will be located in the
  /root.rhui/rhui.log:
  
  Connecting to RHUA [hostname]...
   Successfully connected to [hostname]
  
   Configuring package listings to use proxy [ipaddress:port]
   Unexpected error caught at the shell level
    ... traceback errors ...
    ... traceback errors ...
   SSLError: sslv3 alert handshake failure
  

Local fix

Problem summary

• A Red Hat SSL update to the Red Hat Update Infrastructure (RHUI)
  service to resolve a recent SSL security issue causes the
  PureApplication Red Hat OS update services to fail to deploy.
  

Problem conclusion

• Red Hat has provided updated RPMs required to install the RHUI
  service. The Red Hat OS update shared service binaries have
  been updated in the PureApplication System Red Hat OS update
  pattern. This effects all versions of the IBM provided pattern.
  An updated pattern is provided for each PureApplication System
  version.
  
  The Red Hat OS Update Services pattern type version
  1.0.0.3 (rhus-1.0.0.3.tgz available on IBM Fix Central )
  is available for PureApplication System versions 1.1.0.4 and
  1.1.0.5
  http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent
  =PureSystems&product=ibm/WebSphere/PureApplication+System&releas
  e=1.1.0.4&platform=Linux&function=fixId&fixids=rhus-1.0.0.3&incl
  udeSupersedes=0
  
  The Red Hat OS Update Services pattern type version
  1.0.1.1 (rhus-1.0.1.1.tgz available on IBM Fix Central )
  is available for PureApplication System versions V2.0
  
  http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent
  =PureSystems&product=ibm/WebSphere/PureApplication+System&releas
  e=2.0.0.0&platform=Linux&function=fixId&fixids=rhus-1.0.1.1&incl
  udeSupersedes=0
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  PAPP SYS 8382 I

• Fixed component ID

  5725G3200

Applicable component levels

• R110 PSY

     UP

• R200 PSY

     UP

• R100 PSN

     UP