PI30574: HTTPS ADVISOR FAILS CONNECTING TO A SERVER CONFIGURED AS TLS PROTOCOL ONLY.

Fixes are available

APAR status

Closed as program error.

Error description

If the target server is configured to only accept TLS protocol
as input,  the the https advisor may fail.  The HTTPS advisor
sends an SSLv3 Client Hello which may be refused by the target
server if the target server is configured to reject SSLv3.

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  IBM WebSphere Edge Components Load          *
*                  Balancer users                              *
****************************************************************
* PROBLEM DESCRIPTION: The https advisor will fail if sslv3    *
*                      is disabled on the backend machines.    *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
This issue affects the Load Balancer for ipv4 and the Load
Balancer for ipv4 and ipv6. The https advisor will show a
load of -1 if sslv3 is disabled on the backend servers.

Problem conclusion

The https advisor was written to advised based upon the lowest
supported protocol but it should have sent the highest
supported protocol instead. The connection will be negotiated
to use lower protocol versions if the server does not support
the level but they will not negotiate to use higher levels of
the protocol.

Fix levels:
   Load Balancer for ipv4  7.0.0.32
   Load Balancer for ipv4 and ipv6  7.0.0.39

   Both Load Balancers - 8.0.0.10 and 8.5.5.5

Temporary fix

http://www-01.ibm.com/support/docview.wss?uid=swg21691795

Comments

APAR Information

APAR number
PI30574
Reported component name
WEBS LOAD BALAN
Reported component ID
5724H8811
Reported release
850
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2014-12-01
Closed date
2014-12-02
Last modified date
2014-12-02

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBS LOAD BALAN
Fixed component ID
5724H8811

Applicable component levels

R700 PSY
UP
R800 PSY
UP
R850 PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"850","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
28 April 2022

Tips

PI30574: HTTPS ADVISOR FAILS CONNECTING TO A SERVER CONFIGURED AS TLS PROTOCOL ONLY.

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY

R800 PSY

R850 PSY

Document Information

Share your feedback

Need support?