RE: CERT Advisory: #144389 Return of Bleichenbacher's Oracle Threat (ROBOT)

Perhaps, but I think you're dangling false hopes in front of people. I do
not expect IBM to change their policy on QSSLCSL. I think they will have
to change QSSLCSLCTL from *OPSYS to *USRDFN and manually change QSSLCSL to
omit unsupported ciphers. Then, when they upgrade OS, they can change
QSSLCSLCTL back to *OPSYS.
We have these solutions:
1 - Upgrade to an OS with appropriate values in QSSLCSL.
2 - Open up a SSR and request a PTF to change QSSLCSL.
3 - Change QSSLCSL and QSSLCSLCTL
Option 1 may not be applicable if you are seeing this same message with
IBM i 7.3. If you are, however, I suggest you submit a RFE to get the
unsupported ciphers removed from QSSLCSL from rNext.


Rob Berendt