PK94083: PORTAL DOES NOT GENERATE URLS THAT SWITCH FROM HTTPS TO HTTP WHE N COMBINED WITH HTTP SERVER

APAR status

• Closed as program error.

Error description

• When Portal is used in combination with an HTTP server,
  WebSphere Portal does not generate URLs (most notably,
  URLGenerationTag) that enforce a protocol switch from HTTPS to
  HTTP. Hence, once Portal is switched to HTTPS it cannot revert
  back to HTTP unless the user logs out.
  

Local fix

Problem summary

• When WebSphere Portal is used in combination with an HTTP
  server, it does not generate URLs (most notably,
  URLGenerationTag) that enforce a protocol switch from HTTPS to
  HTTP. Hence, once Portal is switched to HTTPS it cannot revert
  back to HTTP unless the user logs out.
  

Problem conclusion

• When an incoming request is routed from an HTTP Server to
  WebSphere Application Server, the protocol is typically changed
  to an unsecure connection. The information whether the original
  incoming request was secure or not cannot be detected by looking
  at the protocol of the URL. Instead, the code that generates
  URLs needs to check request.isSecure().
  
  Manual Steps:
     None
  
  Failing Module(s):
     Engine: URL Generation
  
  Affected Users:
     End users
  
  Version Information:
      Portal Version(s): 6.0.1.5
       Pre-Requisite(s): PK85065
        Co-Requisite(s): ---
  
      Portal Version(s): 6.0.1.6
       Pre-Requisite(s): PK85065
        Co-Requisite(s): ---
  
      Portal Version(s): 6.1.0.0
       Pre-Requisite(s): PK85065
        Co-Requisite(s): ---
  
      Portal Version(s): 6.1.0.1
       Pre-Requisite(s): PK85065
        Co-Requisite(s): ---
  
      Portal Version(s): 6.1.0.2
       Pre-Requisite(s):
        Co-Requisite(s): ---
  
  Platform Specific:
     This fix applies to all platforms.
  
  A fix is available from Fix Central:
  
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
  r?apar=PK94083&productid=WebSphere%20Portal&brandid=5
  
  You may need to type or paste the complete address into your Web
  browser.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE PORTA

• Fixed component ID

  5724E7600

Applicable component levels

• R60J PSY

     UP

• R60K PSY

     UP

• R610 PSY

     UP

• R61A PSY

     UP

• R61B PSY

     UP