Re: 5250 SSL issue after latest PTF

[Roberto José Etcheverry Romero <yggdrasil.raiker@xxxxxxxxx>]

Paul,

If the fix is only adding protocols and ciphers, why would it be a problem?
AFAIK most if not all programs do a handshake and compare compatible
protocols/ciphers until they figure out what to use.

Roberto

On Thu, Jul 30, 2020 at 12:54 PM Steinmetz, Paul via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

> I had other SSL issues related to latest PTFs.
>
> TLSv1.3 enabled by default with latest PTFs.
> Disable TLSv1.3
>
> QSSLCSLCTL will be changed from *OPSYS to *USRDFN
>
> QSSLPCL will be changed from *OPSYS to
>
> :*TLSV1.2
> *TLSV1.1
> *TLSV1
>
> TLSV1.3 ciphers also have to be removed from QSSLCSL
> *AES_128_GCM_SHA256
> *AES_256_GCM_SHA384
> *CHACHA20_POLY1305_SHA256
> *ECDHE_ECDSA_CHACHA20_POLY1305_SHA256
> *ECDHE_RSA_CHACHA20_POLY1305_SHA256
>
> Paul
>
> -----Original Message-----
> From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
> kannan r
> Sent: Thursday, July 30, 2020 11:48 AM
> To: midrange-l@xxxxxxxxxxxxxxxxxx
> Subject: 5250 SSL issue after latest PTF
>
> ________________________________
>  CAUTION: This email originated from outside of the PENCOR network. Do not
> click on any links or open attachments unless the sender is known, and the
> content is verified as safe.
> ________________________________
>
> Hi,
>
> IBM I Access 5250 is not working after the latest PTF. Its throwing SSL
> error "CWBCO1034 - SSL error, function returned 25202" when connecting via
> port 992.
> Normal port 23 is working fine. And via 992 port in ACS is working fine.
>
> Any suggestions.
>
> Thanks,
> Kannan.
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com