[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: SetError() #29: gsk_sec_soc_open: (GSKit) Handle is not valid.



I had the same problem! You need to work with the Digital Certificate
Manager (DCM). Here's a link for info on that:

http://publib.boulder.ibm.com/infocenter/iseries/v5r4/index.jsp?topic=/r
zahu/rzahurazhudigitalcertmngmnt.htm

Karl


-----Original Message-----
From: Tony.Davis2@xxxxxxx [mailto:Tony.Davis2@xxxxxxx] 
Sent: Wednesday, September 02, 2009 12:14 PM
To: ftpapi@xxxxxxxxxxxxxxxxxxxxxx
Subject: RE: SetError() #29: gsk_sec_soc_open: (GSKit) Handle is not
valid.


I do not even know what a certificate store is. I am completely new to
all of this. I started with Scott's example programs, and am just going
from there. Is this something that can be configured from the iSeries or
perhaps iSeries Navigator?


-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
[mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Karl Woods
Sent: Wednesday, September 02, 2009 1:57 PM
To: HTTPAPI and FTPAPI Projects
Subject: RE: SetError() #29: gsk_sec_soc_open: (GSKit) Handle is not
valid.

A client of ours had the same problem. The problem exists with your
certificate store. How did you create the certificate store on system-B?
If system-A is using a default certificate, system-B should also use the
default. 

Karl B. Woods  



-----Original Message-----
From: Tony.Davis2@xxxxxxx [mailto:Tony.Davis2@xxxxxxx] 
Sent: Wednesday, September 02, 2009 11:42 AM
To: ftpapi@xxxxxxxxxxxxxxxxxxxxxx
Subject: SetError() #29: gsk_sec_soc_open: (GSKit) Handle is not valid.

Again, thanks for spotting that error. But I now have another issue.
As I said, Karl spotted the error, and it is now fixed. So, now I have
to try this on another iSeries. I moved everything from system-A to
system-B, and I am getting a different error on system-B. 

Here is the error:

(GSKit) An operation which is not valid for the current SSL session
state was attempted.               
ssl_error(5): (GSKit) An operation which is not valid for the current
SSL session state was attempted.

(GSKit) Handle is not valid.                                     
ssl_error(1): (GSKit) Handle is not valid.                       
SetError() #29: gsk_sec_soc_open: (GSKit) Handle is not valid.   

Is this a configuration or a security issue?

Thank you,
Tony Davis



-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
[mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Karl Woods
Sent: Wednesday, September 02, 2009 11:32 AM
To: HTTPAPI and FTPAPI Projects
Subject: RE: HTTP/1.1 500 Internal Server Error

Tony,

The fault string in the log says: <faultstring>Error validating Account
Number. Invalid Account Number format. </faultstring>

Check to see how you are formatting the Account Number in program-C
before it is passed to program-A. 

Karl B. Woods  

-----Original Message-----
From: Tony.Davis2@xxxxxxx [mailto:Tony.Davis2@xxxxxxx]
Sent: Wednesday, September 02, 2009 9:17 AM
To: ftpapi@xxxxxxxxxxxxxxxxxxxxxx
Subject: HTTP/1.1 500 Internal Server Error


I have written a program (program-A) that uses http_post_xml() and
returns results as expected. I wrote two others that call this program,
one RPGLE program (program-B) that displays the data on my green screen,
and another SQLRPGLE program (program-C) that returns the data via a
results set.

The RPGLE process works perfectly (program-B calls program-A and
displays the data in a subfile). 

The SQLRPGLE process does not work (program-C calls program-A). I am
testing this process using iSeries Navigator. From iSeries Navigator, I
call a stored procedure, whose associated external program is the
SQLRPGLE program (program-C). 

The process is not bombing, it simply returns an error after executing
the http_post_xml() statement (I execute http_crash() as in the example
that I cloned). The value of rc is 500. I do have debug turned on; that
is, creating a log on the IFS. The message in the IFS log is "SetError()
#13: HTTP/1.1 500 Internal Server Error". 

The entire log is attached. 
Any advice is appreciated.

Thank you,
Tony Davis


  
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------