Re: GSKit SSL Handshake error 406 errno 3406

Brad,

RC=406 (GSK_ERROR_IO) occurs when an error occurs during communication... in other words, the error isn't in the SSL processing, it's on the call to a socket API to retrieve/send data.

The errno 3426 (ECONNRESET) means that the connection was disconnected, and it wasn't expected to be.  According to standards, the 'reset' should indicate some sort of protocol error, i.e. the remote server detected a violation of the protocol, so disconnected you.   I've found this isn't always the case, and remote sites will send a 'reset' to indicate any sort of problem.  I guess we don't live in a perfect world ;-)

Possibly the disconnect is due to the obsolete cipher, as you say?    You could try configuring the system or application to not use that cipher and see if that helps?

Not sure what else to suggest...

-SK

On 5/12/2020 3:01 PM, B Stone wrote:

I'm getting the following on an SSL handshake with an endpoint:

RC(406) errno(3426)

Now, I can't find exactly what that means except "connection reset".

When I look at the certificate it does say it's using an obsolete cipher.
That's the only reason I could think this issue is occurring as connection
works via browser.

Running V7R4.

Thanks.