We had similar issues a while back.
Turns out not all equipment was upgraded to support TLS 1.3, some only supporting TLS 1.2.
Had to remove TLS 1.3, make TLS 1.2 the default.
No errors since then.
TLS 1.3 upgrade is on the horizon.
Paul
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Brad Stone
Sent: Tuesday, October 5, 2021 4:48 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Bad Peer (415) SSL Handshake Error update
Well, I worked with IBM and got them a trace. They found it odd that the same SSL "hello" would work, and then another (that they claim is the exact same... I don't know.. I can't read those traces! haha) the server returned an "Illegal Parameter" error.
They had me go into SST and remove TLS 1.3 and also from QSSLPCL.
I have run my test a few times and received zero errors so far. I have one big backup jog that runs at night that I am running now to see if that happens, as it does many GETURI calls to Google Drive and OneDrive to upload my backups. I updated the log a couple months ago to report any errors and retry until it's successful. So if that log comes back clean, and so does tomorrow morning's log, then I'd call it "fixed". But not really "fixed". :)
I think the clue was I said it just started happening recently when sites were updating their SSL certificates.
I must say this... after actually getting in touch with someone at IBM I am very happy and surprised with the service.. I expected this to go on for days.
Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any Cloud Provider!
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
midrange.com
