Re: HTTPAPI & revoked SSL cert

Brad,

I'm not working with the OP behind the scenes. I'm just going off what
Justin has shared to the group.

What I mean by "destabilizing the IBM i HTTP server", is a state where it
stops responding to CGI requests, or perhaps it's not responding to any
requests. You may not have run into it, perhaps because you're working with
low-volume web sites?

Yes, it could be that all the CGI jobs are going into *MSGW status, but
that's not the only problem that could be occurring.

Nathan.




On Tue, Sep 18, 2018 at 4:06 PM, Bradley Stone <bvstone@xxxxxxxxx> wrote:

On Tue, Sep 18, 2018 at 4:48 PM Nathan Andelin <nandelin@xxxxxxxxx> wrote:

On Tue, Sep 18, 2018 at 3:37 PM, Bradley Stone <bvstone@xxxxxxxxx>

wrote:

I hinted at that... means HTTPAPI has nothing to do with the problem

then.

:)

An error in an HTTPAPI call could be what's destabilizing the IBM i CGI
interface.

Maybe if HTTPAPI is experience an SSL error, and the CGI program isn't
monitoring for it, yes.

Any unresolved error in any CGI program can destabilize the IBM i CGI
interface. CGI program errors can altogether destabilize the IBM i HTTP
server. That's what appears to be happening in this case.

Destabilize? That's a rather interesting choice of terminology. I've had
countless CGI applications running for years on many systems for myself,
customers, etc and if they error out, they error out. They don't
"destabilize" the server. What does that even mean? And how would
restarting the server fix it? These aren't PCs.

A CGI job errors out and that job will either go into MSGW or crash/end (or
possibly loop forever...). The next CGI request will take the next
available job (or start a new one). And if it's really bad, soon you'll
have maxed out the threads that will start all with MSGW. Is that what
you're getting at?

There's obviously much more to this than lets on, and I don't know if
you're working with the OP behind the scenes, but the fact remains, HTTPAPI
in no way is dependent on the Apache HTTP server, or can it "destabilize"
it. The only thing they MAY have in common is DCM, and dealing with SSL
APIs.

The error reported in the original post was from HTTPAPI, and an SSL
error. I stand by my first response until more information is presented.
I asked specific questions about OS level because if it's V7R1 or earlier
that could be a huge problem.
--
This is the RPG programming on the IBM i (AS/400 and iSeries) (RPG400-L)
mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/rpg400-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD