IBM Support

PI53275: TLS ADVISOR FOR EDGE LOAD BALANCER PRODUCTS NEEDS UPDATED CIPHER SUPPORT TO REDUCE LOGGING IN BACKEND SERVER LOGS.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When the lightweight SSL or TLS advisor is used in Edge Load
    Balancer the backend server logs may log handshake errors since
    the advisor does not require a completed handshake (only a
    hello response from backend).  In some cases this can cause
    excessive logging in the backend server logs.
    
    Updating the ciphers supported by the advisor will help reduce
    some of this logging.
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  IBM WebSphere Application Server Edge       *
    *                  component Load Balancer users               *
    ****************************************************************
    * PROBLEM DESCRIPTION: The TLS advisor may encounter           *
    *                      handshake failures due to weak          *
    *                      ciphers.                                *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Weak ciphers are used in the TLS advisor which can cause
    handshake failures. The response indicating a failure will
    cause the TLS to know that the web server is alive and show a
    positive load but there may be errors logged in the web server
    logs due to the handshake failure.
    

Problem conclusion

  • Added additional ciphers to the TLS advisor to eliminate the
    errors.
    
    Affects both Load Balancers and the CBR component.
    
    The fix for this APAR is currently targeted for inclusion in
    fix packs:
       7.0.0.37 LB for ipv4
       7.0.0.41 LB for ipv4 annd ipv6
       8.0.0.13 Both LBs
       8.5.5.9 both LB's and CBR
    Please refer to the Recommended Updates page for delivery
    information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI53275

  • Reported component name

    WEBS APP SERV N

  • Reported component ID

    5724H8800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-11-27

  • Closed date

    2015-12-07

  • Last modified date

    2016-03-07

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBS APP SERV N

  • Fixed component ID

    5724H8800

Applicable component levels

  • R700 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
28 April 2022