[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: SSL/TLS problems
Thanks for the quick response,
We've not got the PTF installed, maybe thats the issue
John
-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Marc Masters
Sent: 11 March 2016 15:13
To: HTTPAPI and FTPAPI Projects <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: SSL/TLS problems
Yes - 5770SS1 SI58229.
-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of John Long
Sent: Friday, March 11, 2016 9:51 AM
To: HTTPAPI and FTPAPI Projects <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: SSL/TLS problems
Do you know which PTF it was?
-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Marc Masters
Sent: 11 March 2016 14:42
To: HTTPAPI and FTPAPI Projects <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: SSL/TLS problems
We had a similar issue, for us it was a damaged PTF. Had to delete, reapply and IPL and now connection is fine.
-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of John Long
Sent: Friday, March 11, 2016 9:26 AM
To: ftpapi@xxxxxxxxxxxxxxxxxxxxxx
Subject: SSL/TLS problems
Hi,
I'm still having problems connecting to a TLS enables server
Here's the dump from my attempt. I've blanked out the parts for
obvious reasons
I can probe the server I'm connecting to and it supports TLS 1, 1.1 &
1.2 are enabled.
I'm running V7R1M0 with TR7
QSSLPCL wont allow me to specify anything higher than *TLSV1, though
this should be high enough for me to connect to the server
Any suggestions/help would be greatly appreciated.
John
HTTPAPI Ver 1.31 released
2016-02-03
NTLM Ver 1.4.0 released
2014-12-22
OS/400 Ver
V7R1M0
https_init():
entered
QSSLPCL = *TLSV1 *SSLV3
*SSLV2
SSL version 2 support
disabled
SSL version 3 support
disabled
Old interface to TLS version 1.0 support
enabled
TLS version 1.0 support
enabled
TLS version 1.1 support
enabled
TLS version 1.2 support enabled
-----------------------------------------------------------------------
--------------
Dump of local-side certificate
information:
-----------------------------------------------------------------------
--------------
-----BEGIN
CERTIFICATE-----
zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz
zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz
-----END CERTIFICATE-----
Serial Number: 56:E0:4C:B5:01:D5:98
Common Name: 2096HODEVCert
Country: UK
State/Province: xxxxxx
State/Province: xxxxxxxx
Org Unit: xxxxxxxxxxx
Issuer CN: xxxxxxxxxxxxxx
Issuer Country: UK
Issuer State/Province: xxxxxxxx
Issuer Org: xxxxxxxxx
Issuer Org Unit: xxxxxxxxxx
Version: 3
not before: 20160308161757
Unknown Field: 16:17:57 08-03-2016
not after: 20210830171757
Unknown Field: 17:17:57 30-08-2021
pub key alg: 1.2.840.113549.1.1.5
http_persist_open(): entered
http_long_ParseURL(): entered
DNS resolver retrans: 2
DNS resolver retry : 2
DNS resolver options: x'00000136'
DNS resolver options:
x'00000136'
DNS default
domainxxxxxxxxxxxxxxx
DNS server found: 172.16.4.2
DNS server found:
8.8.8.8
Nagle's algorithm (TCP_NODELAY)
disabled.
(GSKit) Identifier value is not
valid.
ssl_error(701): (GSKit) Identifier value is not
valid.
SNI hostname error: (GSKit) Identifier value is not
valid.
NOTE: SNI errors are not usually fatal.
(GSKit) No compatible cipher suite available between SSL end
points.
ssl_error(402): (GSKit) No compatible cipher suite available between
SSL end points.
SetError() #30: SSL Handshake: (GSKit) No compatible cipher suite
available between SSL end poin
_____________________________________________________________ T.J.
MORRIS LTD-CONFIDENTIALITY NOTICE This e-mail and its contents,
together with any attachments, are confidential to the sender and the
intended recipient(s). If you are not the intended recipient or agent
responsible for delivery to the intended recipient any unauthorised
storage, use, disclosure, copying, distribution or dissemination of
this e-mail or any part thereof is strictly prohibited and may be
illegal. If you receive this e-mail in error please advise us by
telephone on +44(0)151 530 2920 and delete and destroy this e-mail and
any attachments and any copies thereof from your system immediately.
Any views or opinions expressed in this e-mail are solely those of the
sender and do not necessarily represent those of T J Morris Ltd.
Although any attachments to this e-mail have been checked for viruses
we make no representation and give no warranty as to the absence of
viruses and you should scan this e-mail and attachments for viruses.
___________________________________________________________
NOTICE: This e-mail message and all attachments transmitted with it are intended solely for the use of the addressee and may contain legally privileged and confidential information. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, copying, or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately by replying to this message and please delete it from your computer.
-----------------------------------------------------------------------
This is the FTPAPI mailing list. To unsubscribe, please go to:
https://urldefense.proofpoint.com/v2/url?u=http-3A__cp.mcafee.com_d_5fHCNEedEIfzxRTAQrCXCQrIfcTusjsdEToupKYUqemjqdS7CrLe9zzqdS7C7DAT63qGKQDYq0EMvYj1rBPpw-5FUC2TbCQO5A4-5FsvW-5F8EzxP0V57HTbECzBd-5FAQT1Pa8V7G8FHnjlKMDOEuvkzaT0QSyrjdTVeXz0UsepjudTdw0GmHepk-5FRvxfBY4RtxxYGjB1SKePmRqhJSqSHibAaJMJZ0kvaAWtiRpPaD-2DHY9YKrhK-2DYqejob6Azh0c30lM4xkod42QqA3-5FlErjKreUzXg8DZ&d=CwICAg&c=CXtyNiooiC-9xCP-cXshxQ&r=hmewlO61i7BEPn-bYGADh_xsoZGaNg-2t876OQYS8Eo&m=BFi-RKkIpzbKIaiLwoTXpCQ2CEG3gK0WzgUR1UXkM50&s=3Hx8U21lboOQYONvhGOBgVo1barswXF-M1GE_j-yEQ0&e=
-----------------------------------------------------------------------
_____________________________________________________________ T.J. MORRIS LTD-CONFIDENTIALITY NOTICE This e-mail and its contents, together with any attachments, are confidential to the sender and the intended recipient(s). If you are not the intended recipient or agent responsible for delivery to the intended recipient any unauthorised storage, use, disclosure, copying, distribution or dissemination of this e-mail or any part thereof is strictly prohibited and may be illegal. If you receive this e-mail in error please advise us by telephone on +44(0)151 530 2920 and delete and destroy this e-mail and any attachments and any copies thereof from your system immediately. Any views or opinions expressed in this e-mail are solely those of the sender and do not necessarily represent those of T J Morris Ltd. Although any attachments to this e-mail have been checked for viruses we make no representation and give no warranty as to the absence of viruses and you should scan this e-ma!
il and attachments for viruses. ___________________________________________________________
-----------------------------------------------------------------------
This is the FTPAPI mailing list. To unsubscribe, please go to:
https://urldefense.proofpoint.com/v2/url?u=http-3A__cp.mcafee.com_d_1jWVIe6gUidEIfzxRTAQrCXCQrIfcTusjsdEToupKYUqemjqdS7CrLe9zzqdS7C7DAT63qGKQDYq0EMvYj1rBPpw-5FUC2TbCQO5A4-5FsvW-5F8EzxP0V57HTbECzBd-5FAQT1Pa8V7G8FHnjlKMDOEuvkzaT0QSCrjdTVeXz0UsepjudTdw0GmHepk-5FRvxfBY4RtxxYGjB1SKePmRqhJSqSHibAaJMJZ0kvaAWtiRpPaD-2DHY9YKrhK-2DYqejob6Azh0c30lM4xkod42QqA3-5FlErjKrCVRf&d=CwICAg&c=CXtyNiooiC-9xCP-cXshxQ&r=hmewlO61i7BEPn-bYGADh_xsoZGaNg-2t876OQYS8Eo&m=BFi-RKkIpzbKIaiLwoTXpCQ2CEG3gK0WzgUR1UXkM50&s=_-OqvhEg7JmHzqhpVv8PqlA5FLQkkze9zhxqZFi5A0c&e=
-----------------------------------------------------------------------
NOTICE: This e-mail message and all attachments transmitted with it are intended solely for the use of the addressee and may contain legally privileged and confidential information. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, copying, or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately by replying to this message and please delete it from your computer.
-----------------------------------------------------------------------
This is the FTPAPI mailing list. To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------
_____________________________________________________________ T.J. MORRIS LTD-CONFIDENTIALITY NOTICE This e-mail and its contents, together with any attachments, are confidential to the sender and the intended recipient(s). If you are not the intended recipient or agent responsible for delivery to the intended recipient any unauthorised storage, use, disclosure, copying, distribution or dissemination of this e-mail or any part thereof is strictly prohibited and may be illegal. If you receive this e-mail in error please advise us by telephone on +44(0)151 530 2920 and delete and destroy this e-mail and any attachments and any copies thereof from your system immediately. Any views or opinions expressed in this e-mail are solely those of the sender and do not necessarily represent those of T J Morris Ltd. Although any attachments to this e-mail have been checked for viruses we make no representation and give no warranty as to the absence of viruses and you should scan this e-mail and attachments for viruses. ___________________________________________________________
-----------------------------------------------------------------------
This is the FTPAPI mailing list. To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------