Re: GSKit SSL Handshake error 406 errno 3406

Yes, they are the server. They sent their cipher list and it even included
some older TLS 1.0 ciphers that they claim they need for some older C
applications.

But something is awry if our systems have at least 6 current ciphers that
match but only adding an obsolete one to MY side makes it not error out.
Maybe an issue with my OS itself it sounds like.

I also was looking at a couple other V7R3 systems and their standard cipher
list includes this cipher as well. (My system is V7R4). On their IBM
i QSSLCSLCTL is *OPSYS, so maybe they are behind in updates.

On Tue, May 19, 2020 at 4:25 PM Jack Woehr <jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx>
wrote:

On Tue, May 19, 2020 at 3:22 PM Jack Woehr <
jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx>
wrote:

Correctly configured clients will always try the most modern first.
I'd guess (there are certainly more expert individuals than myself)
there's some misconfig on their end.
The only risk you incur, I believe, is w/r/t the client for whom you are
adding the weaker cipher.
Because the harder ciphers are tried first before dropping back.
*vide supra *the article I linked from Wikipedia.

And if *they *are the server side, it's on *them* that you can use a weaker
cipher.

If *they *want security, they should disallow that cipher.

--
Jack Woehr
Absolute Performance, Inc.
12303 Airport Way, Suite 100
Broomfield, CO 80021

NON-DISCLOSURE NOTICE: This communication including any and all
attachments is for the intended recipient(s) only and may contain
confidential and privileged information. If you are not the intended
recipient of this communication, any disclosure, copying further
distribution or use of this communication is prohibited. If you received
this communication in error, please contact the sender and delete/destroy
all copies of this communication immediately.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com