PI91280: SECURE TRANSPORTS MAY USE THE WRONG TIMEOUT VALUE IF URL TIMEOUTS ARE CONFIGURED USING SETENVIF

9.0.0.7: WebSphere Application Server traditional V9.0 Fix Pack 7
9.0.0.8: WebSphere Application Server traditional V9.0 Fix Pack 8
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
9.0.0.9: WebSphere Application Server traditional V9.0 Fix Pack 9
9.0.0.10: WebSphere Application Server traditional V9.0 Fix Pack 10
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
9.0.0.11: WebSphere Application Server traditional V9.0 Fix Pack 11
9.0.5.0: WebSphere Application Server traditional Version 9.0.5 Refresh Pack
9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
9.0.5.4: WebSphere Application Server traditional Version 9.0.5 Fix Pack 4
9.0.5.5: WebSphere Application Server traditional Version 9.0.5 Fix Pack 5
WebSphere Application Server traditional 9.0.5.6
9.0.5.7: WebSphere Application Server traditional Version 9.0.5 Fix Pack 7
9.0.5.8: WebSphere Application Server traditional Version 9.0.5.8
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
9.0.5.9: WebSphere Application Server traditional Version 9.0.5.9
9.0.5.10: WebSphere Application Server traditional Version 9.0.5.10
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21
9.0.5.11: WebSphere Application Server traditional Version 9.0.5.11

APAR status

• Closed as program error.

Error description

• If the ServerIOTimeout is configured in the httpd.conf file
  using SetEnvIf and the value differs from the ServerIOTimeout
  used in the plugin-cfg.xml file, the incorrect timeout may be
  used with secure connections.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM WebSphere Application Server web        *
  *                  server plugin users                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: Requests using secure transports may    *
  *                      use the incorrect timeout value.        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  If specialized timeout values are defined for URL groups
  (see apar PM94198 for configuration information) and secure
  transports are used, the transport may use the wrong timeout
  value.
  This configuration option is available with IHS or Apache
  webservers only.
  

Problem conclusion

• Although the timeout values were correctly set in the plugin
  module, plugin did not update the values in the SSL library
  (gskit) so SSL connections used previously defined timeout
  values. This only affected sockets which had been previously
  used for request with a different timeout value defined.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.14 and 9.0.0.7.  Please refer to the
  Recommended Updates page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R850 PSY

     UP

• R900 PSY

     UP