IBM Support

SI80253 - OSP-COMM-OTHER-LOOP Duplicate IKE jobs can take high CPU

PTF Cover Letter


PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

OSP-COMM-OTHER-LOOP Duplicate IKE jobs can take high CPU


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED           PTF/FIX  LEVEL

TYPE PROGRAM  RELEASE   NUMBER   MIN/MAX  OPTION
---- -------- --------- -------  -------  ------
PRE  5770999  V7R2M0    MF60859   00/00    0000
CO   5770SS1  V7R2M0    SI73820   00/00    0000
CO   5770SS1  V7R2M0    SI73865   00/00    0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the license agreement which
accompanied, or was contained in, the Program for which you are obtaining
the PTF.  You are not authorized to install or use the PTF except as part
of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.

The applicable license agreement may have been provided to you in printed
form and/or may be viewed using the Work with Software Agreements (WRKSFWAGR)
CL command.





APAR Error Description / Circumvention

-----------------------------------------------
Duplicate QTOKVPNIKE and QTOKVPNIK2 jobs can start if TCP/IP is
started twice and take high CPU if they do not end correctly.

CORRECTION FOR APAR SE78014 :
-----------------------------
VPN does not allow duplicate QTOKVPNIKE and QTOKVPNIK2 jobs to
start.

CIRCUMVENTION FOR APAR SE78014 :
--------------------------------
None.


Activation Instructions


None.




Special Instructions


After applying or removing this PTF, perform the following:
ENDTCPSVR *VPN
STRTCPSVR *VPN

********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI76875 :
=================================================

Restart the affected HTTP server.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI75959 :
=================================================

Before applying/removing this PTF, please do as follows:
VRYCFG CFGOBJ(<NWSD_NAME>) CFGTYPE(*NWS) STATUS(*OFF)
After applying/removing this PTF, please do as follows:
VRYCFG CFGOBJ(<NWSD_NAME>) CFGTYPE(*NWS) STATUS(*ON) GENPTHCERT(*YES)

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI75198 :
=================================================

After PTF is applied/removed, perform the following:
ENDTCPSVR *VPN
STRTCPSVR *VPN

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI73821 :
=================================================

Before PTF is applied/removed, perform the following:
ENDTCPSVR *VPN

After PTF is applied/removed, perform the following:
STRTCPSVR *VPN

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI51949 :
=================================================

After apply/remove of this PTF, perform the following:
endtcpsvr *vpn
strtcpsvr *vpn


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   SI77744      OSP-MSGTCP8605 VPN connections timeout after communication i
   SI76875      OSP-CERT MEMORY LEAK IN CLIENT CERTIFICATE PROCESSING
   SI75959      OSP-CERT-MSGMCH6903 OCCURS IN HTTP SERVER JOB WHEN VALIDATIN
   SI68767      OSP-INTSRVSUP
   SI66293      Objects not saved for NWSSTG
   SI57589      OSP-INTSRVSUP-INCORROUT
   SI56050      OSP-INTSRVSUP-F/QP0FEPFS-T/QP0FEPFS-RC1-MSGCPDA09F
   SI55245      IPL-SRCB2004158 IBM I HOSTING IBM I CLIENTS FAIL AFTER UPGRA
   SI52448      OSP-INTSRVSUP-F/QFPACRSG-T/QUIMNDRV-MSGCPDA4C6 - CRTNWSSTG f
   SI51327      OSP-INTSRVSUP- NWSSTG UNDISCOVERED AFTER RE-SIZE
   SI58345      OSP-INCORROUT DCM 64-BIT TIME SUPPORT FOR DIGITAL CERTIFICAT
   SI54292      OSP-CERT-LOOP APPLICATIONS LOOP WHEN RETRIEVING CERTIFICATE
   SI75198      IBM i IKEv2 VPN connections fail to LibreSwan from Red Hat d
   SI75168      OSP-MSGMCH0601 QTOKVPNIK2 JOB ENDS ABNORMALLY.
   SI73821      VPN IKE manager system jobs
   SI74093      OSP-UNPRED TRAFFIC SELECTOR END PORT VALUE IS SET INCORRECTL
   SI68615      OSP-UNPRED IKEV2 DOES NOT RESPOND TO CHILD_SA REKEY REQUESTS
   SI68548      OSP-MSGMCH0601 QTOKVPNIK2 JOB ENDS ABNORMALLY. IN THE QTOKVP
   SI68548      OSP-UNPRED IKEV2 IS USING THE WRONG SELECTOR LENGTH IN TRAFF
   SI66830      OSP-MSGMCH0601 INTERNET KEY EXCHANGE (IKE) JOBS QTOKVPNIKE &
   SI52983      OSP-COMM VPN IKEv1 connection
   SI52559      OSP-OTHER-MSGMCH0601 QTOKVPNIKE JOB IS ENDING ABNORMALLY.
   SI51949      TCPIP-INCORROUT ping fails for ESP AES-CTR encryption
   SI51291      TCPIP-INCORROUT duplicate timers for IKEv2 liveness

Summary Information

System..............................  i
Models..............................  
Release.............................  V7R2M0
Licensed Program....................  5770SS1
APAR Fixed..........................  View details for APAR SE78014
Superseded by:......................  
Recompile...........................  N
Library.............................  QSYS
MRI Feature ........................  NONE
Cum Level...........................  NONE


IBM i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.2.0","Product":{"code":"SWG60","label":"IBM i"},"Component":"5770SS1","Edition":"","Line of Business":{"code":"LOB57","label":"Power"}}]

Document Information

Modified date:
22 June 2022