PQ52730: EXCESSIVE IMW6802E MESSAGES IN THE HTTP SERVER LOG RETURN CODE -22 (GSK_ERROR_SOCKET_CLOSED).

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Excessive IMW6802E SSL Handshake failed: return code -22
  (GSK_ERROR_SOCKET_CLOSED) are generated to the error log.
  these messages are normal SSL handshake messages and the client
  sees no problems in making the connection. APAR PQ43981 resolves
  this for return codes -10 and -11.
  Another problem which will be fixed by this APAR is an exception
  in "signal". This problem occurs when making an SSL request and
  may result ABEND 4091 or other LE ABEND.
  Traceback:
  PU Addr   PU Offset  Entry         E Addr    E  Offset
  0A92E830  +000022FE  CEEHDSP       0A92E830  +000022FE
  0AB32F98  +0000009A  signal        0AB32F98  +0000009A
  0BB05460  +0000006A  restore_sig   0BB05460  +0000006A
  0BB18520  +0000014A  ossBerDecode  0BB18520  +0000014A
  0BAFB4B0  +000001D2  ossDispatchDecode
                                     0BAFB4B0  +000001D2
  0BAE8C68  +000001C4  ossDecode     0BAE8C68  +000001C4
  0B9D8638  +000000AC  CMSAsnTool::privateDecode(int,Ostr*,void**)
                                     0B9D8638  +000000AC
  0B9D69F8  +000000C2  CMSAsnTool::Decode(int,Ostr*,void**)
                                     0B9D69F8  +000000C2
  0B948800  +000000E8  AsnObject::decodeToPDU() const
  0B948800  +000000E8  AsnObject::decodeToPDU() const
                                     0B948800  +000000E8
  0BA489B0  +00000092  AsnEncryptedPrivateKeyInfo::AsnEncryptedPri
                                     0BA489B0  +00000092
  0BA42C78  +0000006A  CMSKrypto::PBE_Decrypt_MD5WithDES_CBC(const
                                     0BA42C78  +0000006A
  0B8FAA88  +000000A4  AsnEncryptedPrivateKeyInfo::GetPrivateKeyIn
                                     0B8FAA88  +000000A4
  0B7F9978  +000000A2  GSKKeyRecord::RSAPKCS1_DecryptWithPrivate(A
                                     0B7F9978  +000000A2
  0B7DB6D0  +00000106  skitcms_PKCS1PrivateDecrypt
                                     0B7DB6D0  +00000106
  0B7D21B0  +000000E0  RcvV3ClientKeyExchange
                                     0B7D21B0  +000000E0
  0B7CB200  +000010A4  SSL_Receive   0B7CB200  +000010A4
  0B7CB018  +0000011A  SSLV3_Handshake
                                     0B7CB018  +0000011A
  0B7FDBB8  +0000039E  original_skit_secure_soc_init
                                     0B7FDBB8  +0000039E
  0B7FDAF0  +00000066  skit_secure_soc_init
                                     0B7FDAF0  +00000066
  0B5C3438  +00000644  HTSession     0B5C3438  +00000644
  0B6447B0  +00000C12  server_loop   0B6447B0  +00000C12
  0B6AE100  +00000742  HotThread     0B6AE100  +00000742
  0AAE7030  +0000001A  @@GETFN       0AAE6F88  +000000C2
  0A900A08  -0A8F4F2A  main          0A900A08  -0A8F4F2A
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of webserver for OS/390 and z/OS   *
  *                 who use SSL.                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: Excessive msgIMW6802E messages written  *
  *                      into the webserver error log.           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  msgIMW6802E message with code -22 is written into the webserver
  error log when certain types of internal SSL problems occur, but
  the browser/client sees no problem.  The messages are not
  useful.
  

Problem conclusion

• The webserver is modified to suppress error messages resulting
  from internal SSL problems with code -22, since they cause no
  problem at the browser/client.  The latest SSL code is packaged
  with the webserver.
  
  The following COMPID's are affected by these changes:
  
  5697D4300 LDGW for OS/390  Version 5.1 and higher.
  
  PTF Z
  The code changes are stored in CMVC under defect PQ52730.
  
  * Cross Reference between External and Internal Names
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UQ59269 UQ59270 UQ59271 UQ59272 UQ59273 UQ59274 UQ59275 UQ59276
  UQ59277

Modules/Macros

• IMWGSKIP IMWGSKSY IMWSERVR IMWSSRVR IMWYCKEX
  IMWYCKFR IMWYCKUS IMWYCMSD IMWYICMD IMWYIERR IMWYKYMD IMWYKYMN
  IMWYNSPD IMWYPFXD IMWYSKTD IMWYX5CD
  

Fix information

• Fixed component name

  DGW/WAS OS/390

• Fixed component ID

  5697D4300

Applicable component levels

• R510 PSY UQ59269

     UP01/10/30 P F110

• R511 PSY UQ59270

     UP01/10/31 P F110

• R512 PSY UQ59271

     UP01/10/31 P F110

• R513 PSY UQ59272

     UP01/10/31 P F110

• R520 PSY UQ59273

     UP01/10/30 P F110

• R521 PSY UQ59274

     UP01/10/31 P F110

• R522 PSY UQ59275

     UP01/10/31 P F110

• R523 PSY UQ59276

     UP01/10/31 P F110

• R530 PSY UQ59277

     UP01/11/01 P F110

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.