IBM Support

PI38868: THE LDAPS ADVISOR NEEDS TO WORK WITH THE TLSV1.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The LDAPS advisor will fail to check the availability of the
    server which disables SSLv2/SSLv3 and only enables the TLSv1
    protocol.
    
    The LDAPS advisor needs to work with the TLSv1.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  IBM WebSphere Edge Load Balancer users      *
    ****************************************************************
    * PROBLEM DESCRIPTION: If using the TLS advisor or the ldaps   *
    *                      advisor, failures will occur when       *
    *                      older protocols are disabled.           *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    If you disable SSLv2/SSLv3, the ldaps advisor will fail to
    work. If you disable TLSv1.0 the TLS advisor will report
    failures.
    

Problem conclusion

  • Modified the advisors so that the ldaps advisor will work with
    TLSv1.2 thru SSLv2 (attempting stronger algorithms first) and
    the TLS advisor will work with TLS1.2 thru TLS 1.0.
    
    Affects all load balancer users.
    Fix levels:
      v7 for IPv4            7.0.0.34
      v7 for IPv4 and IPv6   7.0.0.40
      v8.0.0.11 (both)
      v8.5.5.7  (both)
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI38868

  • Reported component name

    WEBS LOAD BALAN

  • Reported component ID

    5724H8811

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2015-04-13

  • Closed date

    2015-04-20

  • Last modified date

    2015-04-20

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS LOAD BALAN

  • Fixed component ID

    5724H8811

Applicable component levels

  • R700 PSY

       UP

  • R800 PSY

       UP

  • R850 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
27 April 2022