PI23005: Allow logging of time taken during SSL handshake

Fixes are available

APAR status

Closed as program error.

Error description

There currently isn't a way to log total end-to-end SSL
handshake times.

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  Users of IBM HTTP Server 7.0 or newer with  *
*                  SSL enabled.                                *
****************************************************************
* PROBLEM DESCRIPTION: Cannot log total time taken for a SSL   *
*                      handshake.                              *
****************************************************************
* RECOMMENDATION:  Apply this fix if you have the need to      *
*                  determine the end-to-end time taken during  *
*                  a SSL handshake.                            *
****************************************************************
There was previously no way to log the total end-to-end time
of a SSL handshake.
To accomodate this, a new 'SSL_HANDSHAKE_TIME' environment
variable has been provided, and additional handshake logging
has been backported from v8 to v7.
To log the end-to-end handshake times (for diagnosing
performance issues), turn on the 'SSLTrace' directive and log
the new 'SSL_HANDSHAKE_TIME' environment variable.
For example:
LogFormat "%h %l %u %t \"%r\" %>s %b %{SSL_HANDSHAKE_TIME}e"
common

Problem conclusion

Added the 'SSL_HANDSHAKE_TIME' envvar for v7 and v8,
plus additional handshake logging for v7.

This fix is targeted for IBM HTTP Server fix packs:
- 7.0.0.37
- 8.0.0.10
- 8.5.5.4

Temporary fix

Comments

APAR Information

APAR number
PI23005
Reported component name
IBM HTTP SERVER
Reported component ID
5724J0801
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2014-07-31
Closed date
2014-10-13
Last modified date
2014-10-13

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
IBM HTTP SERVER
Fixed component ID
5724J0801

Applicable component levels

R700 PSY
UP
R800 PSY
UP
R850 PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTJ","label":"IBM HTTP Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
07 September 2022

Tips

PI23005: Allow logging of time taken during SSL handshake

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY

R800 PSY

R850 PSY

Document Information

Share your feedback

Need support?