Download
Downloadable File
| File link | File size | File description |
|---|---|---|
Abstract
SSL0209E with IHS 9.0.5.2 and later
Download Description
PH24493 resolves the following problem:
ERROR DESCRIPTION:
SSL0209E with IHS 9.0.5.2 and later
LOCAL FIX:
ERROR DESCRIPTION:
SSL0209E with IHS 9.0.5.2 and later
LOCAL FIX:
An easy circumvention exists:
SSLCipherSpec TLS13 -TLS_AES_256_GCM_SHA384
PROBLEM SUMMARY:
If a TLS 1.3 connection is established then resumed on a new
connection, and the cipher used is TLS_AES_256_GCM_SHA384,
GSKit can fail and return GSK_ERROR_CRYPTO which results in IHS
logging an SSL0209E error.
Note: Many other causes of SSL0209E exist.
USERS AFFECTED:
All users of IBM HTTP Server
PROBLEM DESCRIPTION:
SSL handshakes in 9.0.5.2 or later fail with SSL0209E in the error_log.
RECOMMENDATION:
None
PROBLEM CONCLUSION:
GSKit will be updated to 8.0.55.15 or later to address the issue.
In the meantime, an easy circumvention is described in the LOCAL FIX section.
The fix for this APAR is targeted for inclusion in IBM HTTP
Server fix packs 9.0.5.4 and 8.5.5.18. For more information,
see 'Recommended Updates for WebSphere Application Server':
http://www.ibm.com/support/docview.wss?uid=swg27004980
SSLCipherSpec TLS13 -TLS_AES_256_GCM_SHA384
PROBLEM SUMMARY:
If a TLS 1.3 connection is established then resumed on a new
connection, and the cipher used is TLS_AES_256_GCM_SHA384,
GSKit can fail and return GSK_ERROR_CRYPTO which results in IHS
logging an SSL0209E error.
Note: Many other causes of SSL0209E exist.
USERS AFFECTED:
All users of IBM HTTP Server
PROBLEM DESCRIPTION:
SSL handshakes in 9.0.5.2 or later fail with SSL0209E in the error_log.
RECOMMENDATION:
None
PROBLEM CONCLUSION:
GSKit will be updated to 8.0.55.15 or later to address the issue.
In the meantime, an easy circumvention is described in the LOCAL FIX section.
The fix for this APAR is targeted for inclusion in IBM HTTP
Server fix packs 9.0.5.4 and 8.5.5.18. For more information,
see 'Recommended Updates for WebSphere Application Server':
http://www.ibm.com/support/docview.wss?uid=swg27004980
Prerequisites
None
Installation Instructions
Review the readme.txt for detailed installation instructions.
| URL | SIZE(Bytes) |
|---|---|
| V90 Readme | 3281 |
| V85 Readme | 3205 |
Download Package
| DOWNLOAD | RELEASE DATE | SIZE(Bytes) |
DOWNLOAD Options |
|---|---|---|---|
| 9.0.5.2 - 9.0.5.3 MultiOS | 19 May 2020 | 138386567 | FC |
| 8.5.5.16 - 8.5.5.17 MultiOS | 19 May 2020 | 210109369 | FC |
Problems Solved
PH24493
On
Technical Support
Contact IBM Support at https://www.ibm.com/software/mysupport/s/ or 1-800-IBM-SERV (US only).
Document Location
Worldwide
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Component":"IBM HTTP Server","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"8.5.5.16;8.5.5.17;9.0.5.2;9.0.5.3","Edition":"Advanced,Base,Enterprise,Network Deployment,Single Server","Line of Business":{"code":"LOB45","label":"Automation"}}]
Problems (APARS) fixed
Problems (APARS) fixed
Was this topic helpful?
Document Information
Modified date:
20 May 2020
UID
ibm16211918