Re: SSL/TLS 1.3 Handshake Error - Possible Fixes/PTFs RC(-11) RC(415)

[Gerald Magnuson <gmagqcy.midrange@xxxxxxxxx>]

I put the fix on my DR machine.
ARGH!  I should have looked at my QSSL* system values before I applied it.
QSSLCSLCTL and QSSLPCL is now set to *OPSYS (should  be *USRDFN, and
TLS1.3;TLS1.2)
and QSSLCSL is different from my production.

On Tue, Feb 1, 2022 at 6:53 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

> I know so far this has only affected a few of us so far, but I had a
> customer report that IBM has issued PTFs that solved the issue for them:
>
> V7R3: https://www.ibm.com/support/pages/ptf/MF69465
>
> V7R4: https://www.ibm.com/support/pages/ptf/MF69461
>
> The errors in question are:
>
> Error performing SSL Handshake.  RC(-11) or RC(-16) PeerCertRC(0) - For the
> base IBM SSL APIs
> Error performing SSL handshake.  RC(415) errno(0) - When using the GSKit
> SSL APIs
>
> Also updated on my FieldExit.com post:
> https://fieldexit.com/forum/display?threadid=618
>
> I'm not sure what they do.. hopefully it's not just removing certain
> ciphers from the active list.
>
>
> Bradley V. Stone
> www.bvstools.com
> Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any Cloud
> Provider!
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com