PI50937: Alleviate looping between SSL and GSKit (IBM Global Security Kit)

8.5.5.9: WebSphere Application Server V8.5.5 Fix Pack 9
8.5.5.10: WebSphere Application Server V8.5.5 Fix Pack 10
8.5.5.11: WebSphere Application Server V8.5.5 Fix Pack 11
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
8.5.5.12: WebSphere Application Server V8.5.5 Fix Pack 12
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
8.5.5.13: WebSphere Application Server V8.5.5 Fix Pack 13
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• Under some currently unknown circumstances, looping may occur
  between mod_ibm_ssl and GSKit. This update allows the server
  to recognize and break such a loop should it occur.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of IBM HTTP Server with SSL enabled   *
  *                  on Unix and z/OS operating systems.         *
  ****************************************************************
  * PROBLEM DESCRIPTION: Looping may occur between mod_ibm_ssl   *
  *                      and GSKit                               *
  ****************************************************************
  * RECOMMENDATION:  Apply this fix if using IBM HTTP Server     *
  *                  with SSL enabled                            *
  ****************************************************************
  Looping between SSL and GSKit has been observed to
  occasionally occur under some currently unknown circumstances.
  This update provides the ability for the server to recognize
  and break such a loop should it occur.
  

Problem conclusion

• Native environment variables IHS_USE_RECVLOOP_PTHREAD_EXIT and
  IHS_USE_RECVLOOP_PROC_EXIT have been added as countermeasures
  to looping between SSL and GSKit. If the looping behavior is
  observed, the countermeasures can be enabled by setting these
  vars in the environment to any value.
  
  This fix is targeted for IBM HTTP Server fix packs:
  - 8.0.0.13
  - 8.5.5.9
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM HTTP SERVER

• Fixed component ID

  5724J0801

Applicable component levels

• R800 PSY

     UP

• R850 PSY

     UP