[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Suggestions on missing config- Do we need to Crypto access product installed ?



   The initial error i got was gsKit operation not supported by SSL when i
   had the application id defined as UPS and not blanks. I was able to get
   past that error with the blank application id.�   https_init(*blanks:*OFF:*ON:*OFF:*OFF:*OFF); � � � ��   I just took your suggestion. I commented out the SSL_Debug_cert_infp in
   the COMMSSLR4 module, commssl_upgrade procedure and was able to post
   successfully to UPS and get a response back. I think it is something in
   the gsKit that is an issue. Do you happen to know which licensed
   program the gsKit is included with or is it now bundled with the OS
   from V7R2 ? I can have the sys admin reinstall and see if that helps.
   here is the rest of the debug log after i did that.
   -----------------------------------------------------------------------
   -------------- � � � � � �   Dump of server-side certificate information: � � � � � � � � �   � � � � � � � � � � � � � � � � ��   -----------------------------------------------------------------------
   -------------- � � � � � �   Cert Validation Code = 0 � � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � � ��   Protocol Used: SSL Version 3 � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � ��   http_persist_post(): entered � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � ��   http_persist_req(POST) entered. � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � �   http_long_ParseURL(): entered � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � �   do_oper(POST): entered � � � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � � ��   There are 0 cookies in the cache � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � ��   POST /hapld/tos/kdwhapltos HTTP/1.1 � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � �   Host: [1]www.pld.ups.com � � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � � � � �   User-Agent: http-api/1.24 � � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � � �   Content-Length: 315339 � � � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � � ��   � � � � � � � � � � � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � � � � � �   �   � � � � � � � � � � � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � � � � � �   �   sendraw(): entered � � � � � � � � � � � � � � � � �   � � � � � � � � � � � � � � � � � � � � � ��
   On Wed, Dec 24, 2014 at 12:16 AM, Scott Klement
   <[2]sk@xxxxxxxxxxxxxxxx> wrote:

     Krish,
     Earlier, you said you were getting (GSkit): Operation Not Supported
     by SSL.� Now you say it's "getting hung up" on the
     SSL_debug_cert_info() procedure.� �Which one is it?� Are you
     getting an error, or is it getting hung up?
     I did a quick test where I just did this:
     *rc = http_get( '[3]https://www.pld.ups.com' **
     **� � � � � � �: '/home/sklement/httpapi/upstest.html' );**
     **
     *I realize this is just a quick/simple test, it doesn't do all of
     the stuff that you are likely to be doing...� but I did not get any
     GSKit errors, and I did not get "hung up".� It sent me back an HTML
     page telling me that the site is only for authorized UPS
     customers...� but the SSL portion worked fine, it sent it back
     using TLS v1.0, fully encrypted and protected...� So HTTPAPI is
     communicating with UPS just fine in my test -- and returning their
     message that I'm not authorized (Which is true, I am not... I don't
     have an account with UPS at my current job.� I did at my previous
     job, but that doesn't help...)
     Can you explain further what's happening with you?� Are you really
     getting "hung up" (i.e. program is getting stuck and not
     responding)?� Or are you getting an error message?
     gsk_attribute_get_cert_info is a system API (part of the operating
     system) so I'm very limited in what I can do if it's not working.
     You could try commenting it out and see what happens, though...�     but I've never heard of a problem with that before, so this strikes
     me as odd.
     On 12/23/2014 10:27 PM, Krish Thirumalai wrote:

     � � In the previous email i was pointing at the wrong place where
     the
     � � program was hanging up in the earlier email. I went deeper
     into the
     � � code to determine where it was hanging up and determined it
     was a
     � � different point trying to get certificate info.
     � � It is getting hung up within the SSL_debug_cert_info procedure
     in
     � � COMMSSLR4 at the following statement.

   -----------------------------------------------------------------------
   This is the FTPAPI mailing list.� To unsubscribe, please go to:
   [4]http://www.scottklement.com/mailman/listinfo/ftpapi
   -----------------------------------------------------------------------

References

   1. http://www.pld.ups.com/
   2. mailto:sk@xxxxxxxxxxxxxxxx
   3. https://www.pld.ups.com/
   4. http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------