Re: SetError() #29: gsk_sec_soc_open: (GSKit) Handle is not valid.

[Scott Klement <sk@xxxxxxxxxxxxxxxx>]

Hi Tony,

"(GSKit) Handle is not valid." means that you (or, HTTPAPI) tried to do 
something with an SSL connection after having already failed to create 
an SSL handle.  That SSL handle must be created successfully or the 
connection won't work.  So you need to look further back in the debug 
log to see the error.

You already did that, of course.  You posted this message as well: 
"(GSKit) An operation which is not valid for the current SSL session 
state was attempted.".   This, essentially, means the same thing.  You 
(or HTTPAPI) tried to perform an SSL operation that the connection was 
in the wrong state for.  In other words, until SSL is initialized 
properly, you can't use it.

If you look back one message further in the debug log (which you didn't 
post, but fortunately, you included the debug log) you'll see this:
(GSKit) Access to the key database is not allowed.

That is the cause of the problem.  You do not have authority to use the 
SSL key database.  Consequently, you won't be able to create SSL 
connections.  Either have someone grant you access, or use an account 
with higher authority.



Tony.Davis2@xxxxxxx wrote:
> Again, thanks for spotting that error. But I now have another issue.
> As I said, Karl spotted the error, and it is now fixed. So, now I have to try this on another iSeries. I moved everything from system-A to system-B, and I am getting a different error on system-B. 
> 
> Here is the error:
> 
> (GSKit) An operation which is not valid for the current SSL session state was attempted.               
> ssl_error(5): (GSKit) An operation which is not valid for the current SSL session state was attempted.
> 
> (GSKit) Handle is not valid.                                     
> ssl_error(1): (GSKit) Handle is not valid.                       
> SetError() #29: gsk_sec_soc_open: (GSKit) Handle is not valid.   
> 
> Is this a configuration or a security issue?
> 
> Thank you,
> Tony Davis
> 
> 
> 
> -----Original Message-----
> From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Karl Woods
> Sent: Wednesday, September 02, 2009 11:32 AM
> To: HTTPAPI and FTPAPI Projects
> Subject: RE: HTTP/1.1 500 Internal Server Error
> 
> Tony,
> 
> The fault string in the log says: <faultstring>Error validating Account
> Number. Invalid Account Number format. </faultstring>
> 
> Check to see how you are formatting the Account Number in program-C
> before it is passed to program-A. 
> 
> Karl B. Woods  
> 
> -----Original Message-----
> From: Tony.Davis2@xxxxxxx [mailto:Tony.Davis2@xxxxxxx] 
> Sent: Wednesday, September 02, 2009 9:17 AM
> To: ftpapi@xxxxxxxxxxxxxxxxxxxxxx
> Subject: HTTP/1.1 500 Internal Server Error
> 
> 
> I have written a program (program-A) that uses http_post_xml() and
> returns results as expected. I wrote two others that call this program,
> one RPGLE program (program-B) that displays the data on my green screen,
> and another SQLRPGLE program (program-C) that returns the data via a
> results set.
> 
> The RPGLE process works perfectly (program-B calls program-A and
> displays the data in a subfile). 
> 
> The SQLRPGLE process does not work (program-C calls program-A). I am
> testing this process using iSeries Navigator. From iSeries Navigator, I
> call a stored procedure, whose associated external program is the
> SQLRPGLE program (program-C). 
> 
> The process is not bombing, it simply returns an error after executing
> the http_post_xml() statement (I execute http_crash() as in the example
> that I cloned). The value of rc is 500. I do have debug turned on; that
> is, creating a log on the IFS. The message in the IFS log is "SetError()
> #13: HTTP/1.1 500 Internal Server Error". 
> 
> The entire log is attached. 
> Any advice is appreciated.
> 
> Thank you,
> Tony Davis
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------