Re: SSL Error initialization V7R2 (sending email)

[B Stone <bvstone@xxxxxxxxx>]

Just for the archives, we got this figured out.

At first Art was getting RC(-24) errors which means there is an expired
certificate or CA on the system.  This shouldn't throw errors, but it does.

More on that to anyone interested:
https://www.fieldexit.com/forum/display?threadid=182

After deleting what we though were all expired certificates, it started
reporting RC(-23) on initialization.  After some fighting, and no help from
IBM (they told us to trust every CA in the system store) we found a rogue
expired CA.  Once deleted, things worked fine.

This was a V7R2 system with a recent CUME as well, from what Art's customer
mentioned.

Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #18 <https://www.bvstools.com/mailtool.html>: Ability to
use SSL, TLS or OAuth 2.0 authentication. (OAuth 2.0 only available with
Google or Microsoft Office 365).

On Mon, Feb 25, 2019 at 11:16 AM B Stone <bvstone@xxxxxxxxx> wrote:

> Good idea to post here, Art.
>
> What's odd with this is it's an RC(-23) on SSL_Init() (not handshake...
> that is important).  3021 (invalid argument I believe) is also quite odd.
>
> The *SYSTEM store is set up according to Art as well.
>
> I've tested on my V7R3 machine with the same server and I believe Art as
> as well on another without issues.  This is a very odd error on Init as it
> isn't even listed in the documentation for SSL_Init().
> Bradley V. Stone
> www.bvstools.com
> MAILTOOL Benefit #19 <https://www.bvstools.com/mailtool.html>: The
> ability to turn off "Strict SSL" settings. This means no importing
> Certificate Authorities (CAs) unless you want to.
>
> On Mon, Feb 25, 2019 at 9:00 AM Art Tostaine, Jr. <atostaine@xxxxxxxxx>
> wrote:
>
> > I've been working with Brad @ bvstools.com and he's been great helping me
> > get started.
> >
> > I am getting an error when sending email using SSL.   The joblog shows:
> >
> > Error during SSL initialization.  The value specified for the argument is
> >   not correct.   RC(-23) errno(3021).
> >
> > Brad's BVSTOOLS log is shown:
> > 02/22/2019 9:37:17 Attempting to create socket...
> >
> > 02/22/2019 9:37:17 Socket created successully!
> >
> > 02/22/2019 9:37:17 Attempting to connect to server smtp.xxxx.net on port
> > 465....         02/22/2019 9:37:17 Attempting SSL connection...
> >
> > 02/22/2019 9:37:17 Error during SSL initialization.
> >
> > Brad says there is a problem during SSL init, maybe a PTF is required.
> > IBM
> > asked me to run a trace and is surprised that there is no trace data.
> >
> > Anyone know of any problems in V7R2 or how I can make IBM understand it's
> > an SSL Init problem :-)
> >
> > Thanks
> > --
> > Art Tostaine
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> > list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/midrange-l.
> >
> > Please contact support@xxxxxxxxxxxx for any subscription related
> > questions.
> >
> > Help support midrange.com by shopping at amazon.com with our affiliate
> > link: https://amazon.midrange.com