PI70332: System property to enable SSL Channel timeoutValueInSSLClosingHandshake property

Fixes are available

APAR status

Closed as program error.

Error description

Add a Java custom property to enable the SSL Channel's
'timeoutValueInSSLClosingHandshake' property for all inbound
or outbound channels, regardless of whether they are or are
not passed the SSL property in the configuration when
created.

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  IBM WebSphere Application Server Version    *
*                  8.5.5 and 9.0 and WebSphere Application     *
*                  Server Liberty users of the SSL Channel     *
****************************************************************
* PROBLEM DESCRIPTION: Threads servicing SSL connections       *
*                      might be blocked by the closing         *
*                      handshake write.                        *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
The closing handshake write for each connection driven through
the SSL channel might block the thread.
If the write does not complete immediately, the channel will
continue to attempt writing indefinitely. This behavior blocks
the thread and a message similar to the following might be
reported:
WSVR0605W: Thread "Proxy : 13" (000000f7) has been active for
746657 milliseconds and may
be hung.  There is/are 1 thread(s) in total in the server that
may be hung.
at java.lang.Thread.yield(Native Method)
at
com.ibm.ws.ssl.channel.impl.SSLUtils.flushCloseDown(SSLUtils.jav
a:216)
at
com.ibm.ws.ssl.channel.impl.SSLUtils.shutDownSSLEngine(SSLUtils.
java:119)
at
com.ibm.ws.ssl.channel.impl.SSLConnectionLink.cleanupSSLConnecti
onLink.java:222)
at
com.ibm.ws.ssl.channel.impl.SSLConnectionLink.close(SSLConnectio
nLink.java:167)
at
com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.close(HttpI
nboundLink.java:884)
at
com.ibm.ws.proxy.channel.http.HttpProxyConnectionLink.clearLink(
HttpProxyConnectionLink.java:2188)

Problem conclusion

The SSL Channel was modified so that the closing handshake write
no longer blocks the thread and provides a timer to control how
long the channel will attempt to complete the write. A new
system property was added to enable the timer for all SSL
channels that are created. The property is
"timeoutValueInSSLClosingHandshake" and accepts an integer value
to configure the amount to wait (in seconds) before giving up on
completing the write. The default value for this property is -1,
which means the channel will wait indefinitely for the write to
complete.


It can be set as JVM custom property on the following panel:

Application Servers > {Server Name} > Process definition > Java
Virtual Machine > Custom properties

The fix for this APAR is currently targeted for inclusion in fix
pack 8.5.5.11, 9.0.0.2 and Liberty 16.0.0.4.  Please refer to
the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PI70332
Reported component name
WAS LIBERTY COR
Reported component ID
5725L2900
Reported release
855
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2016-10-06
Closed date
2016-10-27
Last modified date
2017-01-10

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WAS LIBERTY COR
Fixed component ID
5725L2900

Applicable component levels

R855 PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSD28V","label":"WebSphere Application Server Liberty Core"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"855","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
04 May 2022

Tips

PI70332: System property to enable SSL Channel timeoutValueInSSLClosingHandshake property

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R855 PSY

Document Information

Share your feedback

Need support?