Re: SSL application question

On 23/05/2010, at 2:06 PM, Albert York wrote:

I am not using the HTTP server.

Oh, I thought from something you said previously that you were using the HTTP server. Perhaps it was the use of port 443 and your second append which provided test URLs using the http protocol which made me think that. If you're not using the system HTTP server then your code must itself be an HTTP server. OK.

I just tried both URLs you supplied and I get "Server is not responding" so I presume it's not active.

The QHTTPSVR subsystem is not even
active. My application (an RPG program) listens on a socket on port
443. When a request comes in it tries to establish an SSL connection
using the GSK toolkit. If that works then the client sends an
encrypted password. If that is okay then they start exchanging data.
If the client is not able to establish an SSL connection with my
program (or doesn't send the right password) then my program sends an
HTML document and closes the connection. The client application is
also an RPG program using the GSK toolkit.

OK, so this is just a socket application that:
a) happens to use SSL
b) happens to support the http protocol

Since I have specifically
set up the system so that my application will do the SSL handshake,
why are some requests not getting to my program?

Not sure.

Perhaps your system is multi-homed and you have bound to a specific IP address and the SSL requests are actually for another IP address on your system?

Perhaps it's an ASCII-EBCDIC thing since it works between two OS/400 systems?

Perhaps you are inadvertently using client certificates and the other OS/400 system has such a valid client certificate but the new remote connexions do not?

Regards,
Simon Coulter.
--------------------------------------------------------------------
FlyByNight Software OS/400, i5/OS Technical Specialists

http://www.flybynight.com.au/
Phone: +61 2 6657 8251 Mobile: +61 0411 091 400 /"\
Fax: +61 2 6657 8251 \ /
X
ASCII Ribbon campaign against HTML E-Mail / \
--------------------------------------------------------------------