IBM Support

PI43251: ISOLATE DEPLOYED ARTIFACTS FROM OSS PACKAGES

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • Customer applications link to Apache HTTP Component packages
    provided by WebSphere Application Server
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server                                      *
    ****************************************************************
    * PROBLEM DESCRIPTION: Class loading errors may occur          *
    *                      when an application includes and uses   *
    *                      Apache HTTP Components                  *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The Open Source Software framework, Apache HTTP Components,
    included with WebSphere Application Server (WSAS) is not
    intended for direct application use. Class loading errors and
    unexpected behaviors may occur whenever a Java Platform,
    Enterprise Edition (Java EE) application also includes and
    uses Apache HTTP Components.
    As an additional means to resolve this problem the Application
    Server now accepts the system property
    "-
    Dcom.ibm.ws.classloader.server.alwaysProtectedPackages=org.apa
    che.http.", a control introduced by the feature
    "always-protected packages". This property setting enables the
    server to isolate the packages of Apache HTTP Components
    included with WSAS from all artifacts deployed on the
    application server.
    Usage intructions specific to isolating deployed artifacts
    from Apache HTTP Components are provided by IBM Technote
    "Isolating deployed artifacts from Apache HTTP
    Components provided by WebSphere Application Server", which is
    published at
    http://www.ibm.com/support/docview.wss?uid=swg21902432.
    General instructions for using always-protected packages are
    published in the WSAS Knowledge Center in section "Configuring
    always-protected (isolated) packages" of topic
    http://www-
    01.ibm.com/support/knowledgecenter/?lang=en#!/SSAW57_
    8.5.5/com.ibm.websphere.nd.multiplatform.doc/ae/welc6tech_openso
    urce_isolate.html.
    

Problem conclusion

  • APAR PI43251 enables the user to hide the packages of Apache
    HTTP Components and other Open Source Software packages from
    all Java EE artifacts deployed on an Application Server.
    
    The fix for this APAR is currently targeted for inclusion in
    fix pack 8.5.5.7.  Please refer to the Recommended Updates
    page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI43251

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-06-17

  • Closed date

    2015-06-22

  • Last modified date

    2015-09-14

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R850 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
27 April 2022