[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Ftpapi] SSL handshake error



Handshake errors are almost always caused by missing or too-low of a security certificate.
 
 
had similar issue back in October 2016
 
do the following to check for VLOGS:
 
1) On the IBM i command line type STRSST
 
2) Signon with your DST userid/password.
 
3) Take an opt. 1 --> opt. 5 --> opt. 1 and hit ENTER
 
4) If you see any 'Local Sockets' VLOGS with a major code of 2C00 take an opt. 1 to dump these to printer.
 
5) We can then exit SST and we'll want to send in the resulting spool files to ibm engineer.
 
We'll also want to check the system to see if the following PTFs are applied:
 
MF99105
MF62565
MF61742
 
If these are not applied we would recommend getting them installed with an IPL as they address an issue with SSL relating to Power8 machines at V7R2.
 
This appears to match a known issue we've seen with Power8 systems at V7R2 and V7R3 that impacts SSL transactions described in the following APAR:
 
http://www-01.ibm.com/support/docview.wss?uid=nas2MA45865
 
applying the following PTFs with an IPL resolved this issue
 
MF99105
MF62565
MF61742
 
 
 
 
 
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
-----Original Message-----
From: ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of James H. H. Lampert
Sent: Tuesday, February 21, 2017 4:21 PM
To: HTTPAPI and FTPAPI Projects <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Subject: [Ftpapi] SSL handshake error
 
Running on a customer box, I'm getting this returned from http_error on a "http_url_get_raw" call:
 
> SSL Handshake: (GSKit) I/O: A connection with a remote socket was
> reset by that
 
Any idea what could be going wrong?
 
--
JHHL
_______________________________________________
Ftpapi mailing list
Ftpapi@xxxxxxxxxxxxxxxxxxxxxx
http://scottklement.com/mailman/listinfo/ftpapi
 
_______________________________________________
Ftpapi mailing list
Ftpapi@xxxxxxxxxxxxxxxxxxxxxx
http://scottklement.com/mailman/listinfo/ftpapi