Re: SSL/Certificate/Something Error

["Mark Allen" <scprideandms@xxxxxxxxx>]

Thanks all, it did turn out to be a cert issue, the web guy found in DCM
that the default cert was still pointing to the old expired one.  What threw
us (more like me) off was that he made the change on 5/25 and we got good
trans 26 and 27 but not after.  Guess what the old cert expired on 5/28 not
25.

On 6/2/06, Simon Coulter <shc@xxxxxxxxxxxxxxxxx> wrote:
> On 02/06/2006, at 8:40 AM, Mark Allen wrote:
>
> > [error] ZSRV_MSG0216: Error occurred during SSL processing, error =
> > 406.
>
> You'd normally look up SSL return codes on qsysinc/h(ssl) or
> qsysinc/h(qsossl) but 406 is not an SSL return code. Probably a GSK SSL
> return code. In qsysinc/h(gskssl) shows 406 as a generic I/O error.
>
> > [error] ZSRV_MSG0252: SSL initialization operation failed, return code
> > error
> > = 3426.
>
> This means "A connexion with a remote socket was reset by that socket"
> which makes sense if the client is expecting SSL negotiation but fails
> during the handshake.
>
> > I have not a clue where to start, searched archives, etc.
>
> End and restart the web server with -vv (for very verbose). For example:
>         STRTCPSVR *HTTP HTTPSVR(myserver '-vv')
>
> Check the server job logs and the spooled file created as a result of
> -vv. There will be lots of stuff to sift through but there should be
> something that helps.
>
> A quick Google search on ZSRV_MSG0216 found quite a few hits including
> the archive of this very list. Most of these indicate some sort of
> certificate problem.
>
> Regards,
> Simon Coulter.
> --------------------------------------------------------------------
>     FlyByNight Software         AS/400 Technical Specialists
>
>     http://www.flybynight.com.au/
>     Phone: +61 3 9419 0175   Mobile: +61 0411 091 400        /"\
>     Fax:   +61 3 9419 0175                                   \ /
>                                                               X
>                   ASCII Ribbon campaign against HTML E-Mail  / \
> --------------------------------------------------------------------
>
>
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.