XCOMU0780E ... TxpiInitSSL Failed "server_ctx: SSL_method" undefined

Products

• XCOM Data Transport - Linux PC

Issue/Introduction

Attempting to configure SSL for "CA XCOM Data Transport r11.6 14080 SP00 64bit" on AIX and encountering the following error from a loopback test.

    XCOMU0780E Txpi  308: TxpiInitSSL Failed msg = <server_ctx: SSL_method <tls> undefined.> value = 2:
...
    XCOMU0297E Error requesting header confirmation: XCOMU0780E TcpIp  506: Partner ended TCPIP connection unexpectedly.

In configssl.cnf currently have:

[SSL_METHOD]
INITIATE_SIDE = tls
RECEIVE_SIDE  = tls

What SSL_METHOD should be specified in the configssl.cnf?

Environment

• XCOM™ Data Transport® for AIX 11.6
• XCOM™ Data Transport® for UNIX/Linux PC

Cause

XCOM for Unix r11.6 14080 SP00 64bit only supports SSLv3 and TLS v1.0.

Resolution

XCOM for Unix r11.6 14080 SP00 64bit only supports SSLv3 and TLS v1.0.
The value that needs to be used for configsl.cnf parameter SSL_METHOD is v3 or tlsv1.

Additional Information

XCOM for Unix r11.6 14080 SP00 64bit is a relatively old release and 14080 is only 3 patch levels higher than SP00 GA. Also SP00 has been superseded by SP01.
Therefore support would strongly advise considering an upgrade to r11.6 SP01 and also installing its latest patch to be at the latest maintenance level. SP01 will also provide TLS v1.2 support.
More details here:
XCOM Data Transport for UNIX/Linux 11.6.1 > Installing > Install Using ISO Conventional Method > Upgrade Using ISO Conventional Method
XCOM Data Transport for UNIX/Linux 11.6.1 > Release Notes > Enhanced Features > Service Pack 11.6.01