IC82637: FULL TABLE SCAN ON CERTIFICATE TABLE

patch_SI_5020500

APAR status

• Closed as program error.

Error description

• A performance degradation is caused by the
  updateCertificateListWithNames call in the TransportProxy and
  DocExchangeProxy classes. Debug output shows
  that a full table scan and load is done on the corresponding
  certificate table once for each type of certificate that might
  be associated with each object. Given the number of certificates
  in the system, this is a huge amount of overhead.
  

Local fix

• No workaround
  

Problem summary

• Users Affected:
  All
  
  Problem Description:
  The performance
  degradation is caused by the updateCertificateListWithNames call
  in the
  TransportProxy and DocExchangeProxy classes. Debug output shows
  that a full table scan and load is done on the corresponding
  certificate table once for each type of certificate that might
  be associated with each object. Given the number of certificates
  in the system, this is a huge amount of overhead.
  
  Platforms Affected:
  All
  

Problem conclusion

• Resolution Summary:
  Logic was implemented to include a WHERE clause on all
  certificate loading pertaining to "DOCX" and TRANSP
  Certificates.
  Additionally, the overhead of linked lists
  in the java code has been removed, which will provide
  increased performance.
  
  Initially, each DOCX certificate would call all the certificate
  lists from the base table and filter out from the base
  certificates.
  Now we are passing the DOCX certificate list to the base
  certificate query in the WHERE clause, which does not
  load the full base table.
  A parameter flag in the
  "security.properties_platform_security_ext.in" has been
  introduced to
  switch to the new implementation of the certificate handling.
  The flag "enableOptimalAS2Cache=true" is the
  default option in the system, if it is set to false, the old
  behavior is retained in the system.
  
  
  Delivered in:
  5104,5010,5020401,5020500
  

Temporary fix

Comments

• Published 5/15/2012
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels

• R500 PSY

     UP