Re: IBM ADMIN Instance Error

It's a normal error, if you google it you will find tons of references. The
admin instance (of whose IBM i machine you have forgotten to tell us the
release and PTF level) is backleveled enough that it's still using
deprecated SSL cyphers. You might have heard of all the recent SSL/bash/etc
vulnerabilities. One of the browsers ways to force servers to upgrade was
to deprecate the vulnerable protocols (IIRC all of SSLv3 is vulnerable and
they are using TLS now)
To make it short, you either use an older browser (like a portable version
of Firefox say 20, 30?) or you bring the IBM i partition up to date on the
HTTP, JAVA and related groups so the admin instance runs with the current
encryption.

Best Regards,

Roberto

On Wed, Sep 16, 2015 at 4:44 PM, Art Duarte <art.duarte@xxxxxxx> wrote:

Hello,

Anyone have an idea what this error means when trying to access the IBM
admin page (<host ip>:2001)

Firefox
Cannot communicate securely with peer: no common encryption algorithm(s).
(Error code: ssl_error_no_cypher_overlap)

Chrome
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
A secure connection cannot be established because this site uses an
unsupported protocol.


Sometime ago I was messing with the QSSLCSL , QSSLCSLCTL,QSSLPCL
values. Here are the values:

QSSLCSL
*RSA_RC4_128_MD5
*RSA_EXPORT_RC4_40_MD5
*RSA_EXPORT_RC2_CBC_40_MD5
*RSA_RC2_CBC_128_MD5
*RSA_3DES_EDE_CBC_MD5
*RSA_DES_CBC_MD5

QSSLCSLCTL
Cipher control . . . . : *OPSYS

QSSLPCL
Protocols
*SSLV2

Not Sure if that has anything to do with error, or something else. Your
help is much appreciated.

Thank you
Art Duarte
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.