COG, Can you get a wireshark trace from the client end? (If so I can help you look at the output) What are you using on z/OS? AT-TLS, CICS, Liberty etc?
Colin On Sun, 11 Dec 2022 at 12:12, Keith Gooding < [email protected]> wrote: > TCPIP invokes z/os System SSL so if there is any documentation provided by > IBM it will be in System SSL documentation but I could not find the record > formats. System SSL provides the gsk trace command and it is possible that > this will format the records for you. You will find the definitive > explanation if SSL/TLS handshake records in RFC 8446 for TLS 1.3 which has > references to earlier versions . These can be difficult to read but when I > needed to understand SSL messages some time ago Googling for terms such as > ‘SSL message format’ found several explanations of SSL message structure > with examples. BTW I remember reading that z/os 2.5 includes improved > diagnostics for handshake failures but I have not investigated further. > > Keith > > > On 9 Dec 2022, at 16:47, Crusty Old Guy <[email protected]> > wrote: > > > > > >> > >>> 0090 EZD1285I TTLS Data CONNID: 00000014 SEND CIPHER 1503020002020A > >> The 1503020002020A is an SSL alert packet with a fatal error: > Unexpected message > > > > This brief interchange comes from the archives. I need to find the > meaning of a different cipher. > > > > I've gone through "IP Diagnosis" and didn't find any clues. > > > > Can anyone help? > > > > Thank you, > > COG > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
