× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. WEB400
  3. August 2012

Re: GSK_ERROR_BAD_MESSAGE (410) using GSKit from HTTPAPI

"Is it possible to have unsecure and secure communication over the same port?"

No it is not possible. If the server you are talking to is only listening on one port, then it will either be SSL enabled or not (but not both). That is why the HTTP default for SSL (443) is different from the default for non-ssl (80).

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Karl
Sent: 17 August 2012 14:56
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] GSK_ERROR_BAD_MESSAGE (410) using GSKit from HTTPAPI

I'm not specifying any port.

the URL looks like this

https://192.168.10.10:10050/mytest

Scott's program read the URL and use 10050 for the port, so yes it's using a specific port.

I will try to test with soapui,

Thanks


On Fri, Aug 17, 2012 at 9:05 AM, Bradley Stone <bvstone@xxxxxxxxx> wrote:

I was asking if you specifically using the port needed.. If so, then
the issue is somewhere else.

Can you use a browser or anything else to connect ok?

Brad
www.bvstools.com

On Fri, Aug 17, 2012 at 7:52 AM, Karl <k.mainville@xxxxxxxxx> wrote:
The Web Server is listening on a specific port 10053.
Can that be an issue?
Is it possible to have unsecure and secure communication over the
same
port?

Config. File

Listen *:10053



On Thu, Aug 16, 2012 at 3:27 PM, Bradley Stone <bvstone@xxxxxxxxx>
wrote:

Make sure you're using the right port when connecting. I don't know
if Scott's kit has a setting for the port, but I assume it does...

My GETURI software (similar to HTTPAPI) does and sometimes users
will try to do SSL with it and not update the port from 80 to 443.

The message seems to be saying that it got something it didn't
expect when attempting to negotiate the SSL connection. So the
problem also could be an issue on the server side.

Brad
www.bvstools.com

On Thu, Aug 16, 2012 at 8:13 AM, Karl <k.mainville@xxxxxxxxx> wrote:
Hi,

I'm using HTTPAPI 1.23 on a V5R4 machine. I'm on a local network
and
we
have access to the other IBM i HTTP Web server (V5R4 too).
Nothing is blocked on the network.

The program failed at this line of code from COMMSSLR4

eval rc = gsk_secure_soc_init(wwSslh)

RC = 410

I search the web for this specific error and I can't find
anything
except
this seem to be a problem on the handshake.

I included bellow the HTTPAPI. Did someone already saw this error?


Also, here's the log I have on the Server side.
Thu Aug 16 08:48:49 2012| ¬error| ¬client 172.28.20.50| ZSRV_MSG0017:
Method in request V is not valid


Any help will be appreciate.

Thanks

Karl

---------------------

HTTPAPI Ver 1.23 released 2008-04-24
OS/400 Ver V5R4M0

New iconv() objects set, PostRem=819. PostLoc=0. ProtRem=819.
ProtLoc=0
http_url_post_stmf(): entered
getting post file size...
opening file to be sent...
opening file to be received
http_persist_open(): entered
http_long_ParseURL(): entered
DNS resolver retrans: 2
DNS resolver retry : 2
DNS resolver options: x'00000136'
DNS default domain: xxxxx.com
DNS server found: xxx.xxx.xxx.xxx DNS server found:
xxx.xxx.xxx.xxx DNS server found: xxx.xxx.xxx.xxx
https_init(): entered


----------------------------------------------------------------------
---------------
Dump of local-side certificate information:


----------------------------------------------------------------------
---------------
(GSKit) Peer not recognized or badly formatted message received.
ssl_error(410): (GSKit) Peer not recognized or badly formatted
message received.
SetError() #30: SSL Handshake: (GSKit) Peer not recognized or
badly formatted message received.


----------------------------------------------------------------------
---------------
Dump of server-side certificate information:


----------------------------------------------------------------------
---------------
Cert Validation Code = 0
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing
list To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/web400.

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at
http://archive.midrange.com/web400.


--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/web400.

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To
post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.


--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at http://archive.midrange.com/web400.


NOTICE: The information in this electronic mail transmission is intended by CoralTree Systems Ltd for the use of the named individuals or entity to which it is directed and may contain information that is privileged or otherwise confidential. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error by reply email or by telephone, so that the sender's address records can be corrected.



--------------------------------------------------------------------------------


CoralTree Systems Limited
25 Barnes Wallis Road
Segensworth East, Fareham
PO15 5TT

Company Registration Number 5021022.
Registered Office:
12-14 Carlton Place
Southampton, UK
SO15 2EA
VAT Registration Number 834 1020 74.

As an Amazon Associate we earn from qualifying purchases.

This thread ...
Follow-Ups:
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.