IJ42465: APPLICATIONS CAN TIMEOUT OR FAIL TO LOAD DUE TO CONMAN-MKS SECRET ENCRYPTION PERFORMANCE

APAR status

• Closed as program error.

Error description

• When conman calls MKS to encrypt and store the app secret, the
  operation exceeds the timeout parameter and causes a timeout and
  the app instance fails.
  
  Each time an application is started or stopped, the app
  framework sends conman an updated workload through an API call.
  Due to the performance issue, if the API request takes more than
  the default timeout (30s) to complete, the SSL handshake is
  closed.
  
  When this issue occurs, the following exception is displayed in
  /var/log/qradar.log:
  [hostcontext.hostcontext] [pool-1-thread-4] com.ibm.si.applicat
  ion.platform.exception.ApplicationPlatformServiceException:Unabl
  [https://UUID-example.localdeployment:26001/v1/api/],
  responseCode [0], responseBody [null]
  [hostcontext.hostcontext] [pool-1-thread-4] Caused by:
  [hostcontext.hostcontext] [pool-1-thread-4]
  com.ibm.si.api.workload.v1.ApiException:
  javax.net.ssl.SSLHandshakeException: Remote host terminated the
  handshake
  

Local fix

• No workaround available. APARs identified as 'No workaround
  available' require a software delivery to resolve.
  Administrators can subscribe to the APAR to receive updates when
  software releases are published for this issue.
  

Problem summary

• This issue has been resolved in QRadar 7.5.0 Update Package 6.
  

Problem conclusion

• This issue has been resolved in QRadar 7.5.0 Update Package 6.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  QRADAR SOFTWARE

• Fixed component ID

  5725QRDSW

Applicable component levels