Re: Intermittent SQL0443 when invoking HTTP_GET_BLOB

Also from the page I posted:


***UPDATE 8/18/2021* - This seems to be happening much more and from what
we've been able to tell it's a bug with IBM's SSL GSKit and there is not a
fix in site. For people using GETURI you should monitor for this error and
issue a retry when it's found. Normally the next call works fine. For
other software (such as MAILTOOL) we will be adding a retry when this error
occurs. See this article for more info and what to do
<https://fieldexit.com/forum/display?threadid=618>.

I would call IBM. They can do a trace. This was back in 2021 when I saw
this happening, so maybe there is a PTF out there for it.

On Thu, Dec 11, 2025 at 11:23 AM David Gibbs via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

On Thu, Dec 11, 2025 at 11:16 AM Brad Stone <bvstone@xxxxxxxxx> wrote:

We also see this problem if you don't have the proper TLS versions

enabled

or the cipher list is invalid or includes older ciphers.

I predict it's the latter... certain ciphers in use aren't in your list.
You should post your OS version and what values are for QSSL* system
values.

We're on 7.4.

If it were a cipher list issue, I wouldn't expect the retry to work.

Regardless, here are the system values ...

QSSLCSL:
*AES_128_GCM_SHA256
*AES_256_GCM_SHA384
*CHACHA20_POLY1305_SHA256
*ECDHE_ECDSA_AES_128_GCM_SHA256
*ECDHE_ECDSA_AES_256_GCM_SHA384
*ECDHE_RSA_AES_128_GCM_SHA256
*ECDHE_RSA_AES_256_GCM_SHA384
*ECDHE_ECDSA_CHACHA20_POLY1305_SHA256
*ECDHE_RSA_CHACHA20_POLY1305_SHA256

QSSLCSLCTL: *OPSYS

QSSLPCL: *OPSYS

david
--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding in the American Diabetes Association's Tour de Cure to raise
money for diabetes research, education, advocacy, and awareness. You can
make a tax-deductible donation to my ride by visiting
https://mideml.diabetessucks.net.

I may have diabetes, but diabetes doesn't have me!
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.