IBM Support

PI25325: REUSE SSL SESSIONS TO REDUCE RENEGOTATION COST

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • SSL handshakes come in two forms -- full and abbreviated. Full
    handshakes are expensive for both ends, but the output of full
    handshakes can be reused in an "abbreviated" handshake saving
    time and CPU on both ends.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  IBM WebSphere Application Server webserver  *
    *                  plugin users                                *
    ****************************************************************
    * PROBLEM DESCRIPTION: SSL connections can be costly because   *
    *                      they involve several packet exchanges   *
    *                      to establish secure connections.        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    This change improves performance of SSL connections by reusing
    some information in the prior connection environment so that
    the connection (between plugin and the application server) is
    setup faster.
    

Problem conclusion

  • Modified code to take advantage of a security kit function
    which shortens exchange of information to setup subsequent
    connections to a server.
    
    The fix for this APAR is currently targeted for inclusion in
    fix pack 8.5.5.4.  Please refer to the Recommended Updates
    page for delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI25325

  • Reported component name

    WEBSPHERE APP S

  • Reported component ID

    5724J0800

  • Reported release

    850

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-09-09

  • Closed date

    2014-09-11

  • Last modified date

    2014-09-11

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE APP S

  • Fixed component ID

    5724J0800

Applicable component levels

  • R850 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
28 April 2022