PM86322: A REDIRECTED HTTPS REQUEST WITH INVALID PORT NUMBER RECEIVES AN VAGUE ERROR MESSAGE

APAR status

• Closed as program error.

Error description

• If the port number of a redirected HTTPS request is somehow
  invalid the following message is returned.
  
  CWWKS9105E: Could not determine the SSL port for automatic
  redirection. Check the logs to ensure that the HTTPS (SSL)
  port is started or for possible errors related to the SSL
  configuration such as a missing or incorrect keyStore element.
  
  The message should indicate whether the port is null or
  malformed
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty Profile                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: HTTPS requests redirected to an         *
  *                      invalid port return an error message    *
  *                      that is unclear as to whether the port  *
  *                      is null or malformed.                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The getHTTPSRedirectWebReply() method in HTTPSRedirectHandler
  returns the same message in the case of a null port number as
  it does in the case of a malformed URL exception. These two
  error cases are therefore indistinguishable based solely on
  the error message produced.
  

Problem conclusion

• Each error case now returns a unique error message that
  accurately describes the problem. If an SSL port is null, an
  SSL_PORT_IS_NULL message is produced. If a
  MalformedURLException is thrown, an
  SSL_REQ_URL_MALFORMED_EXCEPTION message is produced.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.1. Please refer to the Recommended Updates page
  for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels

• R850 PSY

     UP