scottklement.com

Have a project that we need to connect to an API and are using the HTTPAPI. The job produces the JSON file and puts it on the IFS. When we try to send the file, we get an error.
(GSKIT) No compatible cipher suite available between SSL end points

Client is running 7.1 and we need to use TLS1.3. Keep getting an error with the SSL handshake. The client has installed a new version of the SSL Certificate. Get the same error. Is there a way to get to use TLS 1.3 at this OS?

Have looked at the for this and have tried a few things but still cannot make the connection.

Where do we start?

It's been a long time, but... I didn't think 7.1 supported TLS 1.3?!

HTTPAPI uses the operating system's SSL/TLS support.

Here's IBM's site on setting up TLS:
https://www.ibm.com/support/pages/confi ... her-suites

The two sites will need to be able to negotiate both a TLS version and cipher suite that they can both work with. The error you're receiving states that it has tried to figure out a compatible one (one that both systems support) but hasn't been able to. You may be able to use the settings (from the link above) to enable compatible protocol/ciphers if they are available but just not enabled.

But I rather doubt it'll be possible with 7.1... this OS release is now almost 12 years old. Maybe it's time to update?