IBM Support

PI70332: System property to enable SSL Channel timeoutValueInSSLClosingHandshake property

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Add a Java custom property to enable the SSL Channel's
    'timeoutValueInSSLClosingHandshake' property for all inbound
    or outbound channels, regardless of whether they are or are
    not passed the SSL property in the configuration when
    created.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  IBM WebSphere Application Server Version    *
    *                  8.5.5 and 9.0 and WebSphere Application     *
    *                  Server Liberty users of the SSL Channel     *
    ****************************************************************
    * PROBLEM DESCRIPTION: Threads servicing SSL connections       *
    *                      might be blocked by the closing         *
    *                      handshake write.                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The closing handshake write for each connection driven through
    the SSL channel might block the thread.
    If the write does not complete immediately, the channel will
    continue to attempt writing indefinitely. This behavior blocks
    the thread and a message similar to the following might be
    reported:
    WSVR0605W: Thread "Proxy : 13" (000000f7) has been active for
    746657 milliseconds and may
    be hung.  There is/are 1 thread(s) in total in the server that
    may be hung.
    at java.lang.Thread.yield(Native Method)
    at
    com.ibm.ws.ssl.channel.impl.SSLUtils.flushCloseDown(SSLUtils.jav
    a:216)
    at
    com.ibm.ws.ssl.channel.impl.SSLUtils.shutDownSSLEngine(SSLUtils.
    java:119)
    at
    com.ibm.ws.ssl.channel.impl.SSLConnectionLink.cleanupSSLConnecti
    onLink.java:222)
    at
    com.ibm.ws.ssl.channel.impl.SSLConnectionLink.close(SSLConnectio
    nLink.java:167)
    at
    com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.close(HttpI
    nboundLink.java:884)
    at
    com.ibm.ws.proxy.channel.http.HttpProxyConnectionLink.clearLink(
    HttpProxyConnectionLink.java:2188)
    

Problem conclusion

  • The SSL Channel was modified so that the closing handshake write
    no longer blocks the thread and provides a timer to control how
    long the channel will attempt to complete the write. A new
    system property was added to enable the timer for all SSL
    channels that are created. The property is
    "timeoutValueInSSLClosingHandshake" and accepts an integer value
    to configure the amount to wait (in seconds) before giving up on
    completing the write. The default value for this property is -1,
    which means the channel will wait indefinitely for the write to
    complete.
    
    
    It can be set as JVM custom property on the following panel:
    
    Application Servers > {Server Name} > Process definition > Java
    Virtual Machine > Custom properties
    
    The fix for this APAR is currently targeted for inclusion in fix
    pack 8.5.5.11, 9.0.0.2 and Liberty 16.0.0.4.  Please refer to
    the Recommended Updates page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI70332

  • Reported component name

    WAS LIBERTY COR

  • Reported component ID

    5725L2900

  • Reported release

    855

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-10-06

  • Closed date

    2016-10-27

  • Last modified date

    2017-01-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WAS LIBERTY COR

  • Fixed component ID

    5725L2900

Applicable component levels

  • R855 PSY

       UP



Document information

More support for: WebSphere Application Server Liberty Core

Software version: 855

Reference #: PI70332

Modified date: 10 January 2017