scottklement.com

Hi Scott,

We are getting SSL protocol error suddenly on the GET httpapi call , this was working for long time and getting this error from yesterday. Could you please help us with this error.

rc = http_url_get_raw( ppAuthUrl
:fd
:%paddr('PARSERESP'));

Error:

recvresp(): entered
recvresp(): end with err
http_close(): entered

It still works intermittently sometimes , but getting more errors lately.

Attached the http log for reference. Appreciate any help on this matter.


HTTPAPI Ver 1.39 released 2018-03-09
NTLM Ver 1.4.0 released 2014-12-22
OS/400 Ver V7R5M0

New iconv() objects set, PostRem=1208. PostLoc=0. ProtRem=819. ProtLoc=0
http_persist_open(): entered
http_long_ParseURL(): entered
DNS resolver retrans: 2
DNS resolver retry : 2
DNS resolver options: x'00000136'
DNS default domain: man.XXXX.com
DNS server found: 10.224.36.251
DNS server found: 10.102.136.251
https_init(): entered
QSSLPCL = *OPSYS
SSL version 2 support disabled
SSL version 3 support disabled
Old interface to TLS version 1.0 support enabled
TLS version 1.0 support enabled
TLS version 1.1 support enabled
TLS version 1.2 support enabled
-------------------------------------------------------------------------------------
Dump of local-side certificate information:
-------------------------------------------------------------------------------------
Nagle's algorithm (TCP_NODELAY) disabled.
SNI hostname set to: XXXXX
-------------------------------------------------------------------------------------
Dump of server-side certificate information:
-------------------------------------------------------------------------------------
Cert Validation Code = 6000
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIQAWWgr7fRHR5wN1aHu9/XXXXXXXXXXXXX
-----END CERTIFICATE-----
Serial Number: 01:65:A0:AF:B7:D1:1D:1E:70:37:56:87:BB:DF:C9:45
Common Name: XXXX
Issuer CN: Amazon RSA 2048 M04
Issuer Country: US
Issuer Org: Amazon
Version: 3
not before: 20251225160000
Unknown Field: 16:00:00 25-12-2025
not after: 20270123155959
Unknown Field: 15:59:59 23-01-2027
pub key alg: 1.2.840.113549.1.1.1
signature algorithm: 1.2.840.113549.1.1.11
Unknown Field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
Unknown Field: 2048
Unknown Field: 46CA3248FF8EFF0AA526611756FE0B06
Unknown Field: 1.2.840.113549.2.5
Unknown Field: 8D163B3328A73A4AFDB0EF2C05F76ECBC337D897
Unknown Field: 4BE48AE089709201311689F2141145F51E9DD2F029CBE4046F102E9CC9CC53BF
Unknown Field: 5
Unknown Field: XXXX
Unknown Field: XXXX
Unknown Field: XXXX
Unknown Field: 0
Unknown Field: 1.3.6.1.5.5.7.3.1
Unknown Field: 2.23.140.1.2.1
Unknown Field: http://crl.r2m04.amazontrust.com/r2m04.crl
Unknown Field: http://crt.r2m04.amazontrust.com/r2m04.cer
Unknown Field: http://ocsp.r2m04.amazontrust.com

SetError() #49: SSL_protocol: Unknown protocol 5000
Protocol Used:
http_persist_get(): entered
http_persist_req(GET) entered.
http_long_ParseURL(): entered
http_long_ParseURL(): entered
do_oper(GET): entered
There are 0 cookies in the cache
GET /wholesaleXXXXXX HTTP/1.1
Host: XXXXX
User-Agent: http-api/1.39
Authorization: Bearer XXXXXXXXXXXXXXXXXXXXXX
Application-Source: IBMi
Connection: close


recvresp(): entered
recvresp(): end with err
http_close(): entered

That message is harmless -- its not an error.

What problem are you having?

Thanks for the response scott.

we are not seeing any response back from the api service in this case, just recvresp(), on retry multiple times, it does get back the response.

recvresp(): entered
recvresp(): end with err
http_close(): entered

Also the response returned to counter rc is not 1, hence getting noted as error