PH30841: Provide a flag to disable TLS close_notify alert on Apache socket close

APAR status

• Closed as program error.

Error description

• A means is needed to disable TLS close_notify alert on Apache
  socket close
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server 9.0            *
  ****************************************************************
  * PROBLEM DESCRIPTION: A TLS close_notify alert is being       *
  *                      issued on Apache socket close           *
  ****************************************************************
  * RECOMMENDATION:  Apply the fix                               *
  ****************************************************************
  A TLS close_notify alert is now being issued during Apache
  socket shutdown, so a means is needed to suppress that to
  match earlier behavior.
  

Problem conclusion

• A "SSLSkipCloseNotify" flag was added to disable sending the
  TLS close_notify alert during Apache socket shutdown.  The
  value of "ON" matches the 9.0.5.1 and earlier behavior.
  
  This fix is targeted for IBM HTTP Server fix packs:
  - 9.0.5.7
  
  For more information, see 'Recommended Updates for WebSphere
  Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM HTTP SERVER

• Fixed component ID

  5724J0801

Applicable component levels