Jim, The EZY1300E message reports that errno 54 (Connection Reset by Peer) was returned on a RECV socket call by the CICS listener (CSKL). I'd conclude that the remote client has, for one reason or another, decided to drop the connection - probably after the SSL handshake as completed since the listener wouldn't see any action until after that (this would be the "Application Transparent" part of AT-TLS).
I've found in the past that using Wireshark (www.wireshark.org) really helps in situations like this. I either use Wireshark to capture the trace on the client side, or take a CTRACE on z/OS (SYSTCPDA) and use IPCS to format the trace into SNIFFER format which I download (in binary) to my PC and let Wireshark decode it. At least you will see how far the SSL handshake progressed. Unfortunately, after you have an encrypted connection decoding the payload is difficult...but not impossible - if you can feed Wireshark your certificate info then it can decrypt the payload too! Although I have to admit to never getting that to work. Another thing you can try is to temporarily turn off encryption by allowing CipherSpec NULL to be negotiated during the SSL handshake. BTW what version of z/OS do you have? I remember trying to set up AT-TLS on a 1.7 system only to find that certificates with keys longer than 1024 bits were not supported by RACF at that level. Cheers, Andrew. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
