Re: SSL Error initialization V7R2 (sending email)

Yes, Brad told me early on to make sure there were no expired or invalid
certs. I did that but my customer must have recreated one since then.

He's still struggling with issues with his new ISP and firewall provider.

On Mon, Feb 25, 2019 at 1:06 PM B Stone <bvstone@xxxxxxxxx> wrote:

Just for the archives, we got this figured out.

At first Art was getting RC(-24) errors which means there is an expired
certificate or CA on the system. This shouldn't throw errors, but it does.

More on that to anyone interested:
https://www.fieldexit.com/forum/display?threadid=182

After deleting what we though were all expired certificates, it started
reporting RC(-23) on initialization. After some fighting, and no help from
IBM (they told us to trust every CA in the system store) we found a rogue
expired CA. Once deleted, things worked fine.

This was a V7R2 system with a recent CUME as well, from what Art's customer
mentioned.

Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #18 <https://www.bvstools.com/mailtool.html>: Ability to
use SSL, TLS or OAuth 2.0 authentication. (OAuth 2.0 only available with
Google or Microsoft Office 365).

On Mon, Feb 25, 2019 at 11:16 AM B Stone <bvstone@xxxxxxxxx> wrote:

Good idea to post here, Art.

What's odd with this is it's an RC(-23) on SSL_Init() (not handshake...
that is important). 3021 (invalid argument I believe) is also quite odd.

The *SYSTEM store is set up according to Art as well.

I've tested on my V7R3 machine with the same server and I believe Art as
as well on another without issues. This is a very odd error on Init as

it

isn't even listed in the documentation for SSL_Init().
Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #19 <https://www.bvstools.com/mailtool.html>: The
ability to turn off "Strict SSL" settings. This means no importing
Certificate Authorities (CAs) unless you want to.

On Mon, Feb 25, 2019 at 9:00 AM Art Tostaine, Jr. <atostaine@xxxxxxxxx>
wrote:

I've been working with Brad @ bvstools.com and he's been great helping

me

get started.

I am getting an error when sending email using SSL. The joblog shows:

Error during SSL initialization. The value specified for the argument

is

not correct. RC(-23) errno(3021).

Brad's BVSTOOLS log is shown:
02/22/2019 9:37:17 Attempting to create socket...

02/22/2019 9:37:17 Socket created successully!

02/22/2019 9:37:17 Attempting to connect to server smtp.xxxx.net on

port

465.... 02/22/2019 9:37:17 Attempting SSL connection...

02/22/2019 9:37:17 Error during SSL initialization.

Brad says there is a problem during SSL init, maybe a PTF is required.
IBM
asked me to run a trace and is surprised that there is no trace data.

Anyone know of any problems in V7R2 or how I can make IBM understand

it's

an SSL Init problem :-)

Thanks
--
Art Tostaine
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com