I had a similar issue years back.
IBM support recommended running a TRCINT Trace type *SCKSSL (SSL socket trace)
How to determine the SSL protocol and cipher suite used for each active System SSL connection to the IBM i
https://www.ibm.com/support/pages/how-determine-ssl-protocol-and-cipher-suite-used-each-active-system-ssl-connection-ibm-i
TRCINT SET(*ON) TRCTBL('SSL-1700x') SIZE(512 *MB) TRCFULL(*STOPTRC) TRCTYPE(*SCKSSL) SLTTRCPNT((17000 17009)).
I wrote a utility to cpysplf the trace output to a flat file, then extract the SSL data to a log file, summarize the output.
Paul
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Alan Shore via MIDRANGE-L
Sent: Wednesday, October 16, 2019 8:54 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Cc: Alan Shore <ashore@xxxxxxxx>
Subject: How can I tell if our transmissins are using TLS 1.2
Hi everyone
Are you sitting comfortably
Then I will begin
We "moved" to TLS 1.2 quite a few months ago Last June, ups required us to send our manifest transmissions to a new end point One that would ONLY accept transmissions using TLS 1.2 This past weekend we performed an ipl No updates Just an ipl, followed by a number of file RGZPFM's Since Monday, we are unable to successfully transmit to the new end point The job log shows the message
3426 SSL_Handshake failed█ with RC code 0
I tried googling
3426 SSL_Handshake failed
But didn't find anything
I am waiting to hear from someone at ups, but it occurred to me Are we no longer transmitting using TLS 1.2?
We are on V7r3
Does anyone know how I can tell if we are transmitting using TLS 1.2?
Alan Shore
E-mail : ASHORE@xxxxxxxx<mailto:ASHORE@xxxxxxxx>
Phone [O] : (631) 200-5019
Phone [C] : (631) 880-8640
'If you're going through hell, keep going.'
Winston Churchill
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
midrange.com
