XCOMLOG warnings XCOMM1516W "SSLv3 protocol enabled" under System SSL

Products

• XCOM Data Transport
• XCOM Data Transport - z/OS

Issue/Introduction

Using XCOM with IBM System SSL and this warning message is appearing multiple times in the XCOMLOG:

XCOMM1516W ##.##.#.#            IPv4-SSL    SSLv3 protocol enabled.  732
    732             This is an obsolete and insecure protocol. It is recommended to switch
    732             SSL_METHOD to TLS

How can it be removed?

Environment

XCOM™ Data Transport® for z/OS

Cause

Per doc. page for XCOMM1516W:
When any secure XCOM transfer or ping takes place the system is detecting that the obsolete and insecure SSLv3 protocol has been enabled so it displays this warning message.
This occurs when SSL_METHOD values for INITIATE_SIDE and RECEIVE_SIDE have been set to either SSLv3 or ALL.
NOTE: If SSL_METHOD is not explicitly set in the SYSconfigssl.cnf file, its values default to ALL.

Resolution

To remove the warning message and disable SSLv3, in the file SYSconfigssl.cnf change or add the SSL_METHOD parameter as follows to enable TLSv1 and higher versions:

[SSL_METHOD]
INITIATE_SIDE=TLSv1
RECEIVE_SIDE=TLSv1

Additional Information

Related article: Converting XCOM OpenSSL configuration files to System SSL
NOTE: Under OpenSSL setting parameter SSL_OPTION=SSL_OP_NO_V3 would achieve the same result but it is no longer supported under SYSTEM SSL.