We had similar issues a while back.
Turns out not all equipment was upgraded to support TLS 1.3, some only supporting TLS 1.2.
Had to remove TLS 1.3, make TLS 1.2 the default.
No errors since then.
TLS 1.3 upgrade is on the horizon.

Paul

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Brad Stone
Sent: Tuesday, October 5, 2021 4:48 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Bad Peer (415) SSL Handshake Error update

Well, I worked with IBM and got them a trace. They found it odd that the same SSL "hello" would work, and then another (that they claim is the exact same... I don't know.. I can't read those traces! haha) the server returned an "Illegal Parameter" error.

They had me go into SST and remove TLS 1.3 and also from QSSLPCL.

I have run my test a few times and received zero errors so far. I have one big backup jog that runs at night that I am running now to see if that happens, as it does many GETURI calls to Google Drive and OneDrive to upload my backups. I updated the log a couple months ago to report any errors and retry until it's successful. So if that log comes back clean, and so does tomorrow morning's log, then I'd call it "fixed". But not really "fixed". :)

I think the clue was I said it just started happening recently when sites were updating their SSL certificates.

I must say this... after actually getting in touch with someone at IBM I am very happy and surprised with the service.. I expected this to go on for days.

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any Cloud Provider!
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com

As an Amazon Associate we earn from qualifying purchases.

This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2022 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.