PI78738:Loop while closing an SSL connection

Download Description

PI78738 resolves the following problem:

ERROR DESCRIPTION:
When an SSL connection is closing, the SSL Channel could potentially loop

LOCAL FIX:

PROBLEM SUMMARY

USERS AFFECTED:
IBM WebSphere Application Server Liberty and WebSphere Application Server
Traditional version 8.5.5 and 9.0 users of SSL

PROBLEM DESCRIPTION:
Sending the final close packet doesn't complete while closing an SSL
connection

RECOMMENDATION:
None

When an SSL connection is closing, the SSL Channel could
potentially loop and the final SSL packet will not be sent. The
stack trace of the loop looks similar to this:

java.lang.Thread.yield(Native Method)
at
com.ibm.ws.ssl.channel.impl.SSLUtils.flushCloseDown(SSLUtils.jav
a:243)
at
com.ibm.ws.ssl.channel.impl.SSLUtils.shutDownSSLEngine(SSLUtils.
java:141)
at
com.ibm.ws.ssl.channel.impl.SSLConnectionLink.cleanup(SSLConnect
ionLink.java:225)
at
com.ibm.ws.ssl.channel.impl.SSLConnectionLink.close(SSLConnectio
nLink.java:169)

PROBLEM CONCLUSION:
The SSL Channel was modified to try sending the final SSL close
packet for 30 seconds. If it doesn't complete successfully, the
connection will just be closed.

The fix for this APAR is currently targeted for inclusion in fix packs:
- 17.0.0.2
- 9.0.0.4
- 8.5.5.12
Please refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980