Fixes are available
18.0.0.3: WebSphere Application Server Liberty 18.0.0.3
9.0.0.10: WebSphere Application Server traditional V9.0 Fix Pack 10
18.0.0.4: WebSphere Application Server Liberty 18.0.0.4
19.0.0.1: WebSphere Application Server Liberty 19.0.0.1
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
19.0.0.2: WebSphere Application Server Liberty 19.0.0.2
19.0.0.3: WebSphere Application Server Liberty 19.0.0.3
9.0.0.11: WebSphere Application Server traditional V9.0 Fix Pack 11
19.0.0.4: WebSphere Application Server Liberty 19.0.0.4
19.0.0.5: WebSphere Application Server Liberty 19.0.0.5
9.0.5.0: WebSphere Application Server traditional Version 9.0.5 Refresh Pack
19.0.0.6: WebSphere Application Server Liberty 19.0.0.6
19.0.0.7: WebSphere Application Server Liberty 19.0.0.7
19.0.0.8: WebSphere Application Server Liberty 19.0.0.8
9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
19.0.0.9: WebSphere Application Server Liberty 19.0.0.9
19.0.0.10: WebSphere Application Server Liberty 19.0.0.10
19.0.0.11: WebSphere Application Server Liberty 19.0.0.11
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
19.0.0.12: WebSphere Application Server Liberty 19.0.0.12
20.0.0.1: WebSphere Application Server Liberty 20.0.0.1
20.0.0.2: WebSphere Application Server Liberty 20.0.0.2
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
20.0.0.3: WebSphere Application Server Liberty 20.0.0.3
20.0.0.4: WebSphere Application Server Liberty 20.0.0.4
20.0.0.5: WebSphere Application Server Liberty 20.0.0.5
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21
APAR status
Closed as program error.
Error description
The SSL Channel utility method for completing the closing handshake, flushCloseDown, currently attempts to complete the final write n times (where n is defaulted to 30 and can be configured by either SSL or JVM custom property). This is done by sleeping the thread for a second before attempting again. This can be improved by taking a timestamp prior to entering the loop. Now, instead of doing n attempts, only sleep the thread if the difference between current system time and origin timestamp is not greater than the configured property's timeout value. When a system is already thrashing, sleeping the thread is not guaranteed to take exactly one second, so this second approach aims to improve the granularity of this closing timeout.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: IBM WebSphere Application Server Liberty * * and WebSphere Application Server * * Traditional version 8.5.5 and 9.0 users of * * SSL * **************************************************************** * PROBLEM DESCRIPTION: The SSL Channel's closing handshake * * timeout logic can be improved * **************************************************************** * RECOMMENDATION: * **************************************************************** The SSL Channel attempts to send a final SSL close packet until a configurable amount of time - defaulted to 30 seconds - is met. The current implementation can be improved to increase the accuracy of this timeout.
Problem conclusion
The SSL Channel code was modified to improve the SSL close packet timeout. The fix for this APAR is currently targeted for inclusion in fix pack 8.5.5.15, 9.0.0.10, and Liberty 18.0.0.3. The Git Issue for Open Liberty can be found here: https://github.com/OpenLiberty/open-liberty/issues/4505. Please refer to the Recommended Updates page for delivery information: http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
Temporary fix
Comments
APAR Information
APAR number
PH01447
Reported component name
LIBERTY PROFILE
Reported component ID
5724J0814
Reported release
CD0
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-08-07
Closed date
2018-12-05
Last modified date
2018-12-05
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
LIBERTY PROFILE
Fixed component ID
5724J0814
Applicable component levels
RCD0 PSY
UP
Document Information
Modified date:
28 April 2022