PK87156: Slow memory leak on z/OS when IBM HTTP Server is configured to request client SSL Certificates

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• A slow memory leak could occur on z/OS systems when the IBM
  HTTP Server is configured to request client certificates.
  This is neither the default nor a typical IBM HTTP Server
  configuration.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users running IBM HTTP Server on z/OS        *
  *                 systems where it has been configured to      *
  *                 request client certificates (via the         *
  *                 'SSLClientAuth' directive with a value       *
  *                 of any of 'optional|required|1|2' )          *
  *                                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: A slow memory leak can occur on z/OS    *
  *                      systems running IBM HTTP Server that is *
  *                      configured to request client SSL        *
  *                      certificates.                           *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  This problem occured due to differences between z/OS and the
  distributed platforms in the behavior of the API used to request
  client certificate details for a given connection.
  

Problem conclusion

• Explicit API calls were added to free the certificate details
  for z/OS systems only.  The free occurs implicitly on
  distributed platforms at the end of the connection.
  
  APAR PK87156 is currently targeted for inclusion in Service
  Level (Fix Pack) 6.1.0.25 of WebSphere Application Server V6.1
  for z/OS.
  
  Please refer to URL:
  //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PK79915

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• BBGUBINF BBOUBINF
  

Fix information

• Fixed component name

  WEBSPHERE FOR Z

• Fixed component ID

  5655I3500

Applicable component levels

• R610 PSY UK47214

     UP09/06/22 P F906

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.