Thanks for replying. We had to use the smpe batch job name it finally worked. Donald J. on IBMMAIN figured it out.
Thanks all. -----Original Message----- From: IBM TCP/IP List [mailto:[email protected]] On Behalf Of VANDER WOUDE, PETER Sent: Wednesday, November 16, 2016 1:30 PM To: [email protected] Subject: Re: [IBMTCP-L] TCP/IP SSL trace help please xposted to IBMMAIN Mike, Add the following to the ftp step. PARM='ENVAR("GSK_TRACE=0xFFFF")/' Then after running the job, go into USS and you will see a file that starts with gskssl.xxxxx.trc (where xxxxx is numbers) Run the command Gsktrace /tmp/gskssl.xxxxx.trc > ssltrace.txt The ssltrace.txt file will the the ssl trace so you can see the tls exchange. Regards, Peter Vander Woude Systems Administrator IV Work: 704-844-4331 Fax: 704-844-3266 701 Crestdale Rd. Matthews, NC 28105 -----Original Message----- From: IBM TCP/IP List [mailto:[email protected]] On Behalf Of Ward, Mike S Sent: Wednesday, November 16, 2016 2:19 PM To: [email protected] Subject: TCP/IP SSL trace help please xposted to IBMMAIN Hello all, we are having a little FTPS problem. As you can see below we are getting: EZA1735I Std Return Code = 10234, Error Code = 00017 We are using the smpe secure procedure. We did this last month and it worked fine now we are getting the above error. We are trying to get an SSL trace of the problem, but we can't seem to get it to work. Below are the commands that we are using to start the SSL trace. After we run the job and stop the trace the dataset we use on GSKWTR is empty. Can someone help us with the GSK trace? Oh the jobename of the FTP started task is FTPD1. We have also tried tracing the TCPIP task same results. Thanks S GSKSRVR TRACE CT,WTRSTART=GSKWTR TRACE CT,ON,COMP=GSKSRVR R n,JOBNAME=(yyy),OPTIONS=(LEVEL=255),WTR=GSKWTR,END where yyy is the name of STC. SMPE FTP JOB TRACE CT,OFF,COMP=GSKSRVR TRACE CT,WTRSTOP=GSKWTR get into IPCS update 0 DEFAULTS - Specify default dump and options with GSKWTR produced > /bin/ftp -e -v -f "//'SSF1.SMPE.JCL(FTPDATA)'" > deliverycb-bld.dhe.ibm.com EZY2640I Using 'SSF1.SMPE.JCL(FTPDATA)' for local site configuration parameters. EZYFT25I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the co ntrol connection. EZYFT31I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the da ta connection. EZA1450I IBM FTP CS V1R13 EZA1772I FTP: EXIT has been set. EZYFT18I Using catalog '/usr/lib/nls/msg/C/ftpdmsg.cat' for FTP messages. EZA1554I Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21. 220-IBM's internal systems must only be used for conducting IBM's 220-business or for purposes authorized by IBM management. 220- 220-dhebpcb01 secure FTP server 220 ready. EZA1701I >>> AUTH TLS 234 TLSv1 EZA2897I Authentication negotiation failed EZA2898I Unable to successfully negotiate required authentication EZA1735I Std Return Code = 10234, Error Code = 00017 EZA2897I Authentication negotiation failed EZA2898I Unable to successfully negotiate required authentication SSF1.SMPE.JCL(FTPDATA) contains the below. SECURE_MECHANISM TLS TLSRFCLEVEL CCCNONOTIFY TLSMECHANISM FTP SECURE_FTP REQUIRED SECURE_CTRLCONN CLEAR ; COMMANDS MAY BE CLEAR (UNENCRYPTED). SECURE_DATACONN PRIVATE ; PAYLOAD MUST BE ENCRYPTED. KEYRING S250SAC/IBMSHOPZ EPSV4 TRUE ========================== This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to which it is addressed. If you have received this email in error, please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this message by mistake and delete this e-mail from your system. If you are not the intended recipient, you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. ---------------------------------------------------------------------- For IBMTCP-L subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBMTCP-L ________________________________ CONFIDENTIALITY NOTICE: This e-mail message and all attachments may contain legally privileged and confidential information intended solely for the use of the addressee. If the reader of this message is not the intended recipient, any reading, dissemination, distribution, copying, or other use of this message or its attachments is prohibited. If you have received this communication in error, please notify the sender immediately by telephone at 704.844.3100 and delete this message and all copies and backups thereof. Thank you. ---------------------------------------------------------------------- For IBMTCP-L subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBMTCP-L ========================== This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to which it is addressed. If you have received this email in error, please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this message by mistake and delete this e-mail from your system. If you are not the intended recipient, you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
