IC76457: SOCSSL PROTOCOL REPORTING SECURE SOCKETS LAYER GSK ERRORS AND EVEN HANGS UNDER STRESS

APAR status

• Closed as program error.

Error description

• Examples from my online.log of errors I can reproduce, albeit
  not
  every time, but under varying loads:
  
  13:54:34  On-Line Mode
  13:54:34  SCHAPI: Started dbScheduler thread.
  13:54:34  Booting Language <spl> from module <>
  13:54:34  Loading Module <SPLNULL>
  13:54:34  SCHAPI: Started 2 dbWorker threads.
  13:55:27  IBM Global Security Kit (GSKit) version 7.0.4.27.
  13:55:28  (31) sockets error - registering a file
  13:55:28  listener-thread: err = 0: oserr = 0: errstr = :
  13:55:28  (33) sockets error - registering a file
  13:55:28  listener-thread: err = 0: oserr = 0: errstr = :
  13:55:28  (35) sockets error - registering a file
  13:55:28  listener-thread: err = 0: oserr = 0: errstr = :
  
  and
  
  12:26:46  listener-thread: err = -28014: oserr = 0: errstr =
  GSK_ERROR_SOCKET_CLOSED: Secure Sockets Layer error:
  GSK_ERROR_SOCKET_CLOSED.
  
  12:26:47  listener-thread: err = -28014: oserr = 107: errstr =
  GSK_ERROR_SOCKET_CLOSED: Secure Sockets Layer error:
  GSK_ERROR_SOCKET_CLOSED.
   System error = 107.
  
  and
  
  13:32:09  listener-thread: err = -28014: oserr = 107: errstr =
  GSK_ERROR_IO: Secure Sockets Layer error: GSK_ERROR_IO.
   System error = 107.
  
  On the client side, I get errors like:
  
  Error -28014 connecting to server as conn_1128671552
  
  and
  
  Error -25582 connecting to server as conn_1134602560
  
  I'm also seeing some various hangs.  For instance,  every other
  connection when two poll threads
  are configured is hanging which is indicating that one of the
  ssl poll threads has failed.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * users using IDS 11.50 with SSL connection                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Customers may see listener errors or session hangs with a    *
  * stress level of connections.                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to IDS 11.50.xC9.                                    *
  ****************************************************************
  

Problem conclusion

• The problem is fixed in IDS 11.50.xC9.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM IDS ENTRP E

• Fixed component ID

  5724L2304

Applicable component levels

• RB15 PSY

     UP