Re: GSK TLS/SSL

I've revisited DCM and my application definition. There is no certificate
assigned to it. I've imported/uploaded the provided cert into the *system
store in DCM. When I go to assign the cert to that appdef, I cannot find
it. Simply clicking on one of the two 'Assign' links does nothing but say
it was successful.

On Wed, Jan 17, 2024 at 12:42 PM Kelly Beard <kenverybigliar@xxxxxxxxx>
wrote:

V7R4
QSSLPCL = *OPSYS
QSSLCSLCTL = *OPSYS *OPSYS, *USRDFN

Thanks for the link and reply. If I can't get something going soon, gonna
give Java a spin. At least I feel like there will be more
logging/exceptions I can leverage.

On Tue, Jan 16, 2024 at 11:22 AM Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

What version and release of the OS are you on?

What values do you have in
QSSLPCL
QSSLCSLCTL

I believe that "Peer not recognized" is a possible sign of trying to use
unsupported (weak) protocols or ciphers.
Either your IBM i is out of date or the server you're trying to connect to
is.

This page may help

https://www.ibm.com/support/pages/configuring-your-ibm-i-system-secure-sockets-layer-ssltransport-layer-security-tls-protocols-and-cipher-suites

Charles

On Fri, Jan 12, 2024 at 11:51 AM Kelly Beard <kenverybigliar@xxxxxxxxx>
wrote:

What can I do with this? The guy I am trying to communicate with on the
other end says that he sees 'something' and I am trying to get from him
what it is, but as far as I can tell, my program is not getting to a

point

where actual data is being sent, but probably security handshaking. I
gotta believe that the iSeries is not trying to communicate in something
like EBCDIC here, but it seems like the two sides cannot 'see' what each
other is trying to do. I guess I need to know if there is some advanced
logging I can turn on for this. This project is kinda stuck unless I

can

get some more information. My program is a client connecting to a

server.

The connection end is working but the "Peer not recognized or badly
formatted message received." is making me wonder about text exchange, if
something like that is happening. I have a certificate installed via

DCM.

I would think that if there was some problem like that, the error

message

would state it. I can post code if anyone is interested.

step: gsk_environment_open
my_env_handle=SPP:0000 :1aefQP0ZSPWT BEAK 022211 :1200:0:14
step: gsk_attribute_set_buffer
step: gsk_attribute_set_enum
step: gsk_attribute_set_enum
step: gsk_environment_init
server_ip=xxx.xxx.xxx.xxx, server_port=6443
step: gsk_secure_soc_open
my_session_handle=SPP:0000 :1aefQP0ZSPWT BEAK 022211 :14000:1:14
step: gsk_attribute_set_numeric_value
gsk_secure_soc_init() failed with rc = 415 (Peer not recognized or badly
formatted message received.), errno=There is no error.


--
Kelly Beard
--
This is the Bare Metal Programming IBM i (AS/400 and iSeries) (C400-L)
mailing list
To post a message email: C400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/c400-l
or email: C400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/c400-l.

--
This is the Bare Metal Programming IBM i (AS/400 and iSeries) (C400-L)
mailing list
To post a message email: C400-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/c400-l
or email: C400-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/c400-l.

--
Kelly Beard