Re: [Ftpapi] Error #32: Time out during SSL handshake

[Scott Klement <sk@xxxxxxxxxxxxxxxx>]

Hello,

Its hard to tell you anything more than what the error message says:  You're receiving a time out while it's trying to negotiate SSL settings.

You are running a very old version of HTTPAPI.  I would recommend that you start by updating to the current version from http://www.scottklement.com/httpapi . In addition, I would recommend making sure you are up-to-date on PTFs for IBM i, including all of the cume, hiper and group ptfs.  This will ensure that you have the latest cryptography from IBM.  All of this is important as TLS (aka "SSL") is constantly changing as the world's cryptography standards change. 

If that doesn't help solve the problem, then I'd need to understand how to reproduce the problem.  The error is that it is timing out waiting for data from the remote server.  This could be caused by many things (network problems being the most likely.) 

-SK

On 9/18/2020 5:36 AM, Ottersberg, Jens wrote:

Hello,

 

we’re using HTTPAPI for several WebServices. I’m creating a call to a new WebService and get Error #32: Time out during SSL handshake.

I’ve tested the WebService with SoapUI and Postman and here it works.

It’s enough to call http_persist_open('https://dcs.ntg.dk:8443':5) to get the error.

Is there something I’m missing?

Or is it because of version 1.38 we’re still using? Until now we had no problems with this version. I’m afraid of an update because of all the WebServices we’re using.

 

 

Log:

HTTPAPI Ver 1.38 released 2017-10-09

NTLM Ver 1.4.0 released 2014-12-22

OS/400 Ver V7R3M0

 

2020-09-18-11.51.20.022000: http_url_get(): entered

2020-09-18-11.51.20.023000: http_persist_open(): entered

2020-09-18-11.51.20.023000: http_long_ParseURL(): entered

2020-09-18-11.51.20.023000: DNS resolver retrans: 2

2020-09-18-11.51.20.023000: DNS resolver retry  : 2

2020-09-18-11.51.20.024000: DNS resolver options: x'00000136'

2020-09-18-11.51.20.024000: https_init(): entered

2020-09-18-11.51.20.025000: QSSLPCL = *OPSYS

2020-09-18-11.51.20.025000: SSL version 2 support disabled

2020-09-18-11.51.20.025000: SSL version 3 support disabled

2020-09-18-11.51.20.025000: Old interface to TLS version 1.0 support enabled

2020-09-18-11.51.20.025000: TLS version 1.0 support enabled

2020-09-18-11.51.20.025000: TLS version 1.1 support enabled

2020-09-18-11.51.20.025000: TLS version 1.2 support enabled

2020-09-18-11.51.20.025000: -------------------------------------------------------------------------------------

2020-09-18-11.51.20.025000: Dump of local-side certificate information:

2020-09-18-11.51.20.025000: -------------------------------------------------------------------------------------

2020-09-18-11.51.20.025000: Nagle's algorithm (TCP_NODELAY) disabled.

2020-09-18-11.51.20.046000: SNI hostname set to: dcs.ntg.dk

2020-09-18-11.51.25.076000: SetError() #32: Time out during SSL handshake

 

Greetings

 

Jens

-- 
_______________________________________________
Ftpapi mailing list
Ftpapi@xxxxxxxxxxxxxxxxxxxxxx
http://scottklement.com/mailman/listinfo/ftpapi