Re: IBM ADMIN Instance Error

[Roberto José Etcheverry Romero <yggdrasil.raiker@xxxxxxxxx>]

It's a normal error, if you google it you will find tons of references. The
admin instance (of whose IBM i machine you have forgotten to tell us the
release and PTF level) is backleveled enough that it's still using
deprecated SSL cyphers. You might have heard of all the recent SSL/bash/etc
vulnerabilities. One of the browsers ways to force servers to upgrade was
to deprecate the vulnerable protocols (IIRC all of SSLv3 is vulnerable and
they are using TLS now)
To make it short, you either use an older browser (like a portable version
of Firefox say 20, 30?) or you bring the IBM i partition up to date on the
HTTP, JAVA and related groups so the admin instance runs with the current
encryption.

Best Regards,

Roberto

On Wed, Sep 16, 2015 at 4:44 PM, Art Duarte <art.duarte@xxxxxxx> wrote:

> Hello,
>
> Anyone have an idea what this error means when trying to access the IBM
> admin page (<host ip>:2001)
>
> Firefox
> Cannot communicate securely with peer: no common encryption algorithm(s).
> (Error code: ssl_error_no_cypher_overlap)
>
> Chrome
> ERR_SSL_VERSION_OR_CIPHER_MISMATCH
> A secure connection cannot be established because this site uses an
> unsupported protocol.
>
>
> Sometime ago I was messing with the QSSLCSL , QSSLCSLCTL,QSSLPCL
> values. Here are the values:
>
> QSSLCSL
> *RSA_RC4_128_MD5
>  *RSA_EXPORT_RC4_40_MD5
>  *RSA_EXPORT_RC2_CBC_40_MD5
>  *RSA_RC2_CBC_128_MD5
>  *RSA_3DES_EDE_CBC_MD5
>  *RSA_DES_CBC_MD5
>
> QSSLCSLCTL
> Cipher control . . . . :   *OPSYS
>
> QSSLPCL
> Protocols
> *SSLV2
>
> Not Sure if that has anything to do with error, or something else. Your
> help is much appreciated.
>
> Thank you
> Art Duarte
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.