[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: SSL/TLS problems



Thanks for the quick response,

We've not got the PTF installed, maybe thats the issue

John

-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Marc Masters
Sent: 11 March 2016 15:13
To: HTTPAPI and FTPAPI Projects <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: SSL/TLS problems

Yes - 5770SS1 SI58229.

-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of John Long
Sent: Friday, March 11, 2016 9:51 AM
To: HTTPAPI and FTPAPI Projects <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: SSL/TLS problems

Do you know which PTF it was?

-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Marc Masters
Sent: 11 March 2016 14:42
To: HTTPAPI and FTPAPI Projects <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: SSL/TLS problems

We had a similar issue, for us it was a damaged PTF.  Had to delete, reapply and IPL and now connection is fine.

-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of John Long
Sent: Friday, March 11, 2016 9:26 AM
To: ftpapi@xxxxxxxxxxxxxxxxxxxxxx
Subject: SSL/TLS problems

   Hi,


   I'm still having problems connecting to a TLS enables server


   Here's the dump from my attempt. I've  blanked out the parts for
   obvious reasons


   I can probe the server I'm connecting to and it supports TLS 1, 1.1 &
   1.2 are enabled.


   I'm running V7R1M0 with TR7


   QSSLPCL wont allow me to specify anything higher than *TLSV1, though
   this should be high enough for me to connect to the server



   Any suggestions/help  would be greatly appreciated.



   John



   HTTPAPI Ver 1.31 released
   2016-02-03

   NTLM Ver 1.4.0 released
   2014-12-22

   OS/400 Ver
   V7R1M0



   https_init():
   entered

   QSSLPCL = *TLSV1 *SSLV3
   *SSLV2

   SSL version 2 support
   disabled

   SSL version 3 support
   disabled

   Old interface to TLS version 1.0 support
   enabled

   TLS version 1.0 support
   enabled

   TLS version 1.1 support
   enabled

   TLS version 1.2 support enabled

   -----------------------------------------------------------------------
   --------------

   Dump of local-side certificate
   information:

   -----------------------------------------------------------------------
   --------------

   -----BEGIN
   CERTIFICATE-----

   zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz

   zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz

   -----END CERTIFICATE-----

   Serial Number: 56:E0:4C:B5:01:D5:98

   Common Name: 2096HODEVCert

   Country: UK

   State/Province: xxxxxx

   State/Province: xxxxxxxx

   Org Unit: xxxxxxxxxxx

   Issuer CN: xxxxxxxxxxxxxx

   Issuer Country: UK

   Issuer State/Province: xxxxxxxx

   Issuer Org: xxxxxxxxx

   Issuer Org Unit: xxxxxxxxxx

   Version: 3

   not before: 20160308161757

   Unknown Field: 16:17:57 08-03-2016

   not after: 20210830171757

   Unknown Field: 17:17:57 30-08-2021

   pub key alg: 1.2.840.113549.1.1.5


   http_persist_open(): entered

   http_long_ParseURL(): entered

   DNS resolver retrans: 2

   DNS resolver retry  : 2

   DNS resolver options: x'00000136'

   DNS resolver options:
   x'00000136'

   DNS default
   domainxxxxxxxxxxxxxxx

   DNS server found: 172.16.4.2

   DNS server found:
   8.8.8.8

   Nagle's algorithm (TCP_NODELAY)
   disabled.

   (GSKit) Identifier value is not
   valid.

   ssl_error(701): (GSKit) Identifier value is not
   valid.

   SNI hostname error: (GSKit) Identifier value is not
   valid.

   NOTE: SNI errors are not usually fatal.


   (GSKit) No compatible cipher suite available between SSL end
   points.

   ssl_error(402): (GSKit) No compatible cipher suite available between
   SSL end points.

   SetError() #30: SSL Handshake: (GSKit) No compatible cipher suite
   available between SSL end poin


   _____________________________________________________________ T.J.
   MORRIS LTD-CONFIDENTIALITY NOTICE This e-mail and its contents,
   together with any attachments, are confidential to the sender and the
   intended recipient(s). If you are not the intended recipient or agent
   responsible for delivery to the intended recipient any unauthorised
   storage, use, disclosure, copying, distribution or dissemination of
   this e-mail or any part thereof is strictly prohibited and may be
   illegal. If you receive this e-mail in error please advise us by
   telephone on +44(0)151 530 2920 and delete and destroy this e-mail and
   any attachments and any copies thereof from your system immediately.
   Any views or opinions expressed in this e-mail are solely those of the
   sender and do not necessarily represent those of T J Morris Ltd.
   Although any attachments to this e-mail have been checked for viruses
   we make no representation and give no warranty as to the absence of
   viruses and you should scan this e-mail and attachments for viruses.
   ___________________________________________________________

NOTICE: This e-mail message and all attachments transmitted with it are intended solely for the use of the addressee and may contain legally privileged and confidential information. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, copying, or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately by replying to this message and please delete it from your computer.



-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
https://urldefense.proofpoint.com/v2/url?u=http-3A__cp.mcafee.com_d_5fHCNEedEIfzxRTAQrCXCQrIfcTusjsdEToupKYUqemjqdS7CrLe9zzqdS7C7DAT63qGKQDYq0EMvYj1rBPpw-5FUC2TbCQO5A4-5FsvW-5F8EzxP0V57HTbECzBd-5FAQT1Pa8V7G8FHnjlKMDOEuvkzaT0QSyrjdTVeXz0UsepjudTdw0GmHepk-5FRvxfBY4RtxxYGjB1SKePmRqhJSqSHibAaJMJZ0kvaAWtiRpPaD-2DHY9YKrhK-2DYqejob6Azh0c30lM4xkod42QqA3-5FlErjKreUzXg8DZ&d=CwICAg&c=CXtyNiooiC-9xCP-cXshxQ&r=hmewlO61i7BEPn-bYGADh_xsoZGaNg-2t876OQYS8Eo&m=BFi-RKkIpzbKIaiLwoTXpCQ2CEG3gK0WzgUR1UXkM50&s=3Hx8U21lboOQYONvhGOBgVo1barswXF-M1GE_j-yEQ0&e=
-----------------------------------------------------------------------
_____________________________________________________________ T.J. MORRIS LTD-CONFIDENTIALITY NOTICE This e-mail and its contents, together with any attachments, are confidential to the sender and the intended recipient(s). If you are not the intended recipient or agent responsible for delivery to the intended recipient any unauthorised storage, use, disclosure, copying, distribution or dissemination of this e-mail or any part thereof is strictly prohibited and may be illegal. If you receive this e-mail in error please advise us by telephone on +44(0)151 530 2920 and delete and destroy this e-mail and any attachments and any copies thereof from your system immediately. Any views or opinions expressed in this e-mail are solely those of the sender and do not necessarily represent those of T J Morris Ltd. Although any attachments to this e-mail have been checked for viruses we make no representation and give no warranty as to the absence of viruses and you should scan this e-ma!
 il and attachments for viruses. ___________________________________________________________
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
https://urldefense.proofpoint.com/v2/url?u=http-3A__cp.mcafee.com_d_1jWVIe6gUidEIfzxRTAQrCXCQrIfcTusjsdEToupKYUqemjqdS7CrLe9zzqdS7C7DAT63qGKQDYq0EMvYj1rBPpw-5FUC2TbCQO5A4-5FsvW-5F8EzxP0V57HTbECzBd-5FAQT1Pa8V7G8FHnjlKMDOEuvkzaT0QSCrjdTVeXz0UsepjudTdw0GmHepk-5FRvxfBY4RtxxYGjB1SKePmRqhJSqSHibAaJMJZ0kvaAWtiRpPaD-2DHY9YKrhK-2DYqejob6Azh0c30lM4xkod42QqA3-5FlErjKrCVRf&d=CwICAg&c=CXtyNiooiC-9xCP-cXshxQ&r=hmewlO61i7BEPn-bYGADh_xsoZGaNg-2t876OQYS8Eo&m=BFi-RKkIpzbKIaiLwoTXpCQ2CEG3gK0WzgUR1UXkM50&s=_-OqvhEg7JmHzqhpVv8PqlA5FLQkkze9zhxqZFi5A0c&e=
-----------------------------------------------------------------------

NOTICE: This e-mail message and all attachments transmitted with it are intended solely for the use of the addressee and may contain legally privileged and confidential information. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, copying, or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately by replying to this message and please delete it from your computer.



-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------
_____________________________________________________________ T.J. MORRIS LTD-CONFIDENTIALITY NOTICE This e-mail and its contents, together with any attachments, are confidential to the sender and the intended recipient(s). If you are not the intended recipient or agent responsible for delivery to the intended recipient any unauthorised storage, use, disclosure, copying, distribution or dissemination of this e-mail or any part thereof is strictly prohibited and may be illegal. If you receive this e-mail in error please advise us by telephone on +44(0)151 530 2920 and delete and destroy this e-mail and any attachments and any copies thereof from your system immediately. Any views or opinions expressed in this e-mail are solely those of the sender and do not necessarily represent those of T J Morris Ltd. Although any attachments to this e-mail have been checked for viruses we make no representation and give no warranty as to the absence of viruses and you should scan this e-mail and attachments for viruses. ___________________________________________________________
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------