PH20154: PLUGIN WEBSOCKET UPGRADE REQUEST RESPONSE CODE NOT VERIFIED

8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3

APAR status

• Closed as program error.

Error description

• Response code from WebSphere Application Server for a
  websocket-upgrade is not checked by the web server plugin.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server web        *
  *                  server plugin users with websocket          *
  *                  applications                                *
  ****************************************************************
  * PROBLEM DESCRIPTION: The web server plugin does not verify   *
  *                      the response from the application       *
  *                      server for the websocket-upgrade.       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The web server plugin should verify that the application
  server responses with a successful 101-switching protocol
  response to the websocket-upgrade request.
  

Problem conclusion

• Modified the code to verify the response from the application
  server.
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.17 and 9.0.5.3.  For more information, see
  'Recommended Updates for WebSphere Application Server':
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP