PK74791: SSL0267E DOESN'T DISTINGUISH BETWEEN TIMEOUTS ESTABLISHING AND COMPLETING THE SSL HANDSHAKE

Fixes are available

APAR status

Closed as program error.

Error description

SSL0267E doesn't distinguish between timeouts establishing and
completing the SSL handshake.

Local fix

Problem summary

****************************************************************
* USERS AFFECTED: Users of IBM HTTP Server 6.0, 6.1, and 7.0   *
* that use SSL.                                                *
****************************************************************
* PROBLEM DESCRIPTION: SSL0267E doesn't distinguish between    *
* timeouts establishing and completing the SSL handshake.      *
****************************************************************
* RECOMMENDATION: Apply this fix if you use SSL and need more  *
* information about SSL handshake failures.                    *
****************************************************************
IBM HTTP Server does not distinguish in its error message for
SSL handshake failures whether a timeout occurred during the
handshake or before the handshake had begun.

Problem conclusion

IHS has been modified to add new messages:

SSL0270I: SSL Handshake Failed, Timeout (dd seconds) occurred
before any data received.

Reason: A connection was received on an SSL port, but no data
was received from the client before the timeout expired.

Solution: If the timeout (set by the Timeout directive) has
been reduced from the default value, verify that it's
reasonable.  If the message occurs intermittantly, it's
probably normal, due to things like users cancelling page loads
and browser or system crashes.  If the message occurs in
bursts, it might indicate a denial of service attack in
progress.

SSL0271I: SSL Handshake Failed, client closed connection
without sending any data.

Reason: A connection was received on an SSL port, but the
client closed the connection without beginning the handshake.

Solution: If the message occurs intermittantly, it's probably
normal, due to things like users cancelling page loads and
browser or system crashes.  If the message occurs in bursts, it
might indicate a denial of service attack in progress.

SSL0272I: SSL Handshake Failed, I/O error before any data
received.

Reason: A connection was received on an SSL port, but a network
error broke the connection before any data was received from
the client.

Solution: If the message occurs intermittantly, it's probably
normal, due to things like users cancelling page loads and
browser or system crashes.  If the message occurs in bursts, it
might indicate a denial of service attack in progress.


SSL0273I: Non-SSL request received on connection configured for
SSL

Reason: A connection was received on an SSL port, but the data
received was not SSL, and looked like a normal non-SSL request.

Solution: Verify that the port in question is intended to be
configured for SSL.  Look for bad links to the page in
question, that should use https: but instead use http:.


This fix is targeted for fix packs:
  6.0.2.33
  6.1.0.23
  7.0.0.3

Temporary fix

Comments

APAR Information

APAR number
PK74791
Reported component name
IBM HTTP SERVER
Reported component ID
5724J0801
Reported release
61A
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2008-10-30
Closed date
2008-11-11
Last modified date
2008-11-11

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
IBM HTTP SERVER
Fixed component ID
5724J0801

Applicable component levels

R60A PSN
UP
R60H PSN
UP
R60P PSN
UP
R60I PSN
UP
R60S PSN
UP
R60W PSN
UP
R60Z PSN
UP
R61A PSN
UP
R61H PSN
UP
R61P PSN
UP
R61I PSN
UP
R61S PSN
UP
R61W PSN
UP
R61Z PSN
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTJ","label":"IBM HTTP Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
07 September 2022

Tips

PK74791: SSL0267E DOESN'T DISTINGUISH BETWEEN TIMEOUTS ESTABLISHING AND COMPLETING THE SSL HANDSHAKE

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R60A PSN

R60H PSN

R60P PSN

R60I PSN

R60S PSN

R60W PSN

R60Z PSN

R61A PSN

R61H PSN

R61P PSN

R61I PSN

R61S PSN

R61W PSN

R61Z PSN

Document Information

Share your feedback

Need support?