Re: GSK_ERROR_BAD_MESSAGE (410) using GSKit from HTTPAPI

The Web Server is listening on a specific port 10053.
Can that be an issue?
Is it possible to have unsecure and secure communication over the same port?

Config. File

Listen *:10053



On Thu, Aug 16, 2012 at 3:27 PM, Bradley Stone <bvstone@xxxxxxxxx> wrote:

Make sure you're using the right port when connecting. I don't know
if Scott's kit has a setting for the port, but I assume it does...

My GETURI software (similar to HTTPAPI) does and sometimes users will
try to do SSL with it and not update the port from 80 to 443.

The message seems to be saying that it got something it didn't expect
when attempting to negotiate the SSL connection. So the problem also
could be an issue on the server side.

Brad
www.bvstools.com

On Thu, Aug 16, 2012 at 8:13 AM, Karl <k.mainville@xxxxxxxxx> wrote:

Hi,

I'm using HTTPAPI 1.23 on a V5R4 machine. I'm on a local network and we
have access to the other IBM i HTTP Web server (V5R4 too). Nothing is
blocked on the network.

The program failed at this line of code from COMMSSLR4

eval rc = gsk_secure_soc_init(wwSslh)

RC = 410

I search the web for this specific error and I can't find anything except
this seem to be a problem on the handshake.

I included bellow the HTTPAPI. Did someone already saw this error?


Also, here's the log I have on the Server side.
Thu Aug 16 08:48:49 2012| ¬error| ¬client 172.28.20.50| ZSRV_MSG0017:
Method in request V is not valid


Any help will be appreciate.

Thanks

Karl

---------------------

HTTPAPI Ver 1.23 released 2008-04-24
OS/400 Ver V5R4M0

New iconv() objects set, PostRem=819. PostLoc=0. ProtRem=819. ProtLoc=0
http_url_post_stmf(): entered
getting post file size...
opening file to be sent...
opening file to be received
http_persist_open(): entered
http_long_ParseURL(): entered
DNS resolver retrans: 2
DNS resolver retry : 2
DNS resolver options: x'00000136'
DNS default domain: xxxxx.com
DNS server found: xxx.xxx.xxx.xxx
DNS server found: xxx.xxx.xxx.xxx
DNS server found: xxx.xxx.xxx.xxx
https_init(): entered

-------------------------------------------------------------------------------------

Dump of local-side certificate information:

-------------------------------------------------------------------------------------

(GSKit) Peer not recognized or badly formatted message received.
ssl_error(410): (GSKit) Peer not recognized or badly formatted message
received.
SetError() #30: SSL Handshake: (GSKit) Peer not recognized or badly
formatted message received.

-------------------------------------------------------------------------------------

Dump of server-side certificate information:

-------------------------------------------------------------------------------------

Cert Validation Code = 0
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.