Re: SetError() #24: gsk_env_init: (GSKit) I/O: Unknown system state

[PReid@xxxxxxxxxxxx]

   Hi Scott.
   As far as I know we've never run SSL on this box before.
   When I try to get to the Digital Certificate Manager for our iSeries
   via internet explorer by typing http//:ourIPaddress:2001  I immediately
   get a Certificate Error message before I even sign on. The error says
   "Mismatched Address - The security certificate presented by this
   website was issued for a different website's address." When I click on
   View Certificate is says Issued To: [1]www.ibm.com Issued By:
   [2]www.ibm.com Valid from 10/2/2008 to 5/28/2033. It says This
   certificate is OK.  There is a Install Certificate button. When I pops
   up a little window that says "The import was successful" however; I
   still get the error.
   ___________________________________________________________
   Paul Reid
   Application Developer II
   I
   Erb Group of Companies | 290 Hamilton Road | New Hamburg, Ontario | N3A
   1A2
   Phone: 519.662.6133 ext. 2363
   Web: [3]http://www.erbgroup.com/
   From:        Scott Klement <sk@xxxxxxxxxxxxxxxx>
   To:        HTTPAPI and FTPAPI Projects <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
   Date:        01/02/2013 12:58 PM
   Subject:        Re: SetError() #24: gsk_env_init: (GSKit) I/O: Unknown
   system state
   Sent by:        ftpapi-bounces@xxxxxxxxxxxxxxxxxxxxxx
     __________________________________________________________________

   Hi Paul,
   GSKit is short for "Global Secure Toolkit", and it is part of the IBM i
   operating system.
   HTTPAPI is calling the gsk_environment_init() API.  The API is
   returning
   GSK_ERROR_IO (406), and the errno value is EUNKNOWN (3474).
   I haven't encountered this error, personally, but my guess is that
   something is not right in your Digital Certificate Manager.  Have you
   run SSL on this box before?
   -SK
   On 1/2/2013 10:49 AM, PReid@xxxxxxxxxxxx wrote:
   >     Hello everyone. I am having an issue when I attempt to run
   EXAMPLE3
   >     from library LIBHTTP. I've modified the program as follows:
   >     callp   http_debug(*on)
   >     eval    rc = http_url_get(
   >                 'https://www.fortify.net/sslcheck.html':
   >                 '/tmp/httptest.html')
   >     if      rc <> 1
   >     callp   http_crash
   >     endif
   >     I always get rc = -1 which calls http_crash. The following is
   what get
   >     written to httpapi_debug.txt:
   >     HTTPAPI Ver 1.24 released 2012-01-23
   >     OS/400 Ver V6R1M0
   >     New iconv() objects set, PostRem=819. PostLoc=0. ProtRem=819.
   ProtLoc=0
   >     http_url_get(): entered
   >     http_persist_open(): entered
   >     http_long_ParseURL(): entered
   >     DNS resolver retrans: 2
   >     DNS resolver retry  : 2
   >     DNS resolver options: x'00000136'
   >     DNS default domain: ERBGROUP.COM
   >     DNS server found: 192.168.2.6
   >     DNS server found: 216.171.96.38
   >     DNS server found: 216.16.248.50
   >     https_init(): entered
   >     (GSKit) I/O: Unknown system state.
   >     ssl_error(406): (GSKit) I/O: Unknown system state.
   >     SetError() #24: gsk_env_init: (GSKit) I/O: Unknown system state.
   >     We are running a Power 7 Model: 8202/E4C Processor Group: EPC6
   O/S is:
   >     V6R1M0
   >     Nobody (including me) in our shop is familiar with the GSKit. Is
   it
   >     something that is installed on an iSeries? I've checked online,
   but I
   >     can't find any information that tells me how to check if it is
   >     installed, or how to check what version it is.
   >     If you had any advice on how I should begin resolving this issue
   it
   >     would be much appreciated.
   >     Thanks very much, Paul.
   >
   >
   >
   >
   -----------------------------------------------------------------------
   > This is the FTPAPI mailing list.  To unsubscribe, please go to:
   > [4]http://www.scottklement.com/mailman/listinfo/ftpapi
   >
   -----------------------------------------------------------------------
   -----------------------------------------------------------------------
   This is the FTPAPI mailing list.  To unsubscribe, please go to:
   [5]http://www.scottklement.com/mailman/listinfo/ftpapi
   -----------------------------------------------------------------------

References

   1. file://localhost/tmp/www.ibm.com
   2. file://localhost/tmp/www.ibm.com
   3. http://www.erbgroup.com/
   4. http://www.scottklement.com/mailman/listinfo/ftpapi
   5. http://www.scottklement.com/mailman/listinfo/ftpapi

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------