PQ80619: Slow performance on SSL Handshakes with IHS 1.3.19.x and 2.0.42.x with GSKit Version 5.0.5.83.

 Fixes are available

PQ85834; 2.0.47,2.0.42,2.0.42.1,2.0.42.2: GSKit vulnerability and cumulative fix
PQ80619: Slow performance on SSL Handshakes with Version 1.3.19.0 and 2.0.



APAR status
Closed as program error.

Error description
SSL Performance Degredation with IHS 1.3.19.x and 2.0.42.x
during SSL handshakes
Local fix
Install GSK 5.0.5.88  There are some additional
installation steps. This fix
causes to use an older optimized code library. This is only for
PPC boxes. Older
Power architecture boxes will SIGILL almost immediately.

Instructions for failing back to the older optimized code
library:

1. Install GSKit as per normal.

2. The post install creates a symbolic link from

/usr/lib/libgsk5krsw.so ->
/usr/opt/ibm/gskkm/lib/ppc/libgsk5krsw.so

We need to replace it with a link to the older optimized code
library

cd /usr/lib
rm libgsk5krsw.so
ln -s libgsk5krsw.so
/usr/opt/ibm/gskkm/lib/bsafev52ppc/libgsk5krsw.so

If SIGILL occurs, reinstall GSK 5.0.5.88 without the above
steps.
Problem summary
SSL Performance issue (low performance). The li
bgsk5krsw.so gskit library is taking up to much CPU.
Problem conclusion
Problem is in IHS1.3.26 and IHS2.0.42  gskit
 fixed the library to not take up CPU
Temporary fix Comments
APAR information
APAR number PQ80619
Reported component name WAS HTTP SERVER
Reported component ID 5630A3603
Reported release 00W
Status CLOSED PER
PE NoPE
HIPER NoHIPER
Special Attention NoSpecatt
Submitted date 2003-11-07
Closed date 2003-11-07
Last modified date 2003-11-07

APAR is sysrouted FROM one or more of the following:
PQ80486

APAR is sysrouted TO one or more of the following:

Modules/Macros
GSKIT          

Publications Referenced

Fix information
Fixed component name WAS HTTP SERVER
Fixed component ID 5630A3603

Applicable component levels
R00W PSN    UP


Document Information


Product categories: Software > Application Servers > Distributed Application & Web Servers > IBM HTTP Server > Runtime
Operating system(s):
Software version: 00W
Software edition:
Reference #: PQ80619
IBM Group: Software Group
Modified date: Nov 7, 2003