On Tuesday, 09/05/2006 at 12:33 ZE2, "Rempel, Horst" <[EMAIL PROTECTED]> 
wrote:

> I know that there are TN3270 Clients that have negotiation problems with 
VM 
> TCPIP.
> But if you use the internalclientparm notn3270e, then it should work.

SSL is not based on TN3270E; it is a separate negotiation, if using 
negotiated SSL.  A client trace of the conversation is the most efficient 
way of debugging the problem.  Traces can be obtained by using the debug 
capabilities built into the client (if any) or by using a program like 
tcpdump or Ethereal.

>From the message description Cecilia posted, it sounds like her emulator 
is configured for connection to a non-negotiated ("static") SSL port and 
it sent an SSL client_hello, expecting a server_hello in response.  If you 
still try to connect to port 23, and port 23 hasn't been configured as 
secure on the VM side, then VM will send telnet data instead of an SSL/TLS 
server_hello.  This is why a client trace is valuable.

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to