SSL problem

[FrankHildebrandt]

Hi Scott,

I have a problem with SSL when I use HTTPAPI.



I execute the following command.

HTTPAPI URL('https://tickets.mycompany.ch/rest/api/2 ... oject=''SW''+
and+updated%3E%3D''2021-10-01+12:00''+order+by+updated+asc&maxResults=100&field
s=id,key,created,summary,status,updated,assignee,issuetype') DOWNLOAD('/tmp/jira
_data.json') REQTYPE(*GET) USER(???) PASS(???) DEBUG('/tmp/jira_debu
g.txt')



I get the following error.

ssl_error(415): (GSKit) Peer ...
SetError() #30: SSL Handshake: (GSKit) Peer ...



Here are the debug data.

HTTPAPI Ver 1.43 released 2021-04-19
NTLM Ver 1.4.0 released 2014-12-22
OS/400 Ver V7R3M0

New iconv() objects set, PostRem=819. PostLoc=0. ProtRem=819. ProtLoc=0
http_setauth(): entered
http_persist_open(): entered
http_long_ParseURL(): entered
DNS resolver retrans: 2
DNS resolver retry : 2
DNS resolver options: x'00000136'
DNS default domain: INTERN.DNS
DNS server found: 192.168.248.1
https_init(): entered
QSSLPCL = *OPSYS
SSL version 2 support disabled
SSL version 3 support disabled
Old interface to TLS version 1.0 support enabled
TLS version 1.0 support enabled
TLS version 1.1 support enabled
TLS version 1.2 support enabled
TLS version 1.3 support enabled
initializing GSK environment
GSK Environment now available
-------------------------------------------------------------------------------------
Dump of local-side certificate information:
-------------------------------------------------------------------------------------
Nagle's algorithm (TCP_NODELAY) disabled.
SNI hostname set to: tickets.mycompany.ch
(GSKit) Peer hat empfangene Nachricht nicht erkannt oder falsch formatiert.
ssl_error(415): (GSKit) Peer hat empfangene Nachricht nicht erkannt oder falsch formatiert.
SetError() #30: SSL Handshake: (GSKit) Peer hat empfangene Nachricht nicht erkannt oder falsch f



The text "Peer hat empfangene Nachricht nicht erkannt oder falsch formatiert." is in german. Here is the translation. "Peer did not recognise received message or formatted it incorrectly."



It would be great if you could point me to the right direction regarding this problem.

Thank you.

Frank

[Scott Klement]

Hi Frank,

The English message is "Peer not recognized or badly formatted message received."

There are many things that can cause this symptom. For some reason, it is unable to understand the SSL/TLS certificate that was sent by the computer you are connected to.

Here are some possibilities:

• The computer you have connected to is not using TLS/SSL.
• The computer is using TLS/SSL but it is a different version, and it was unable to negotiate the right version.
• The computer is using a cipher that yours does not recognize.
• Something is damaged/missing in their SSL certificate.

This error is returned by the following IBM routine: https://www.ibm.com/docs/en/i/7.4?topic ... c_init.htm
The error code is GSK_ERROR_BAD_PEER, which is number 415. "Peer not recognized or badly formatted message received."

[FrankHildebrandt]

Thank you.