Thanks a lot, Sharon - you always give such a lot of insight. I will try your suggestions ASAP and let you know how it proceeds.
/jan Sharon Lucas wrote: > On one of our AIX 6.1 machines with STAF V3.4.5 installed (using the STAF > installation binaries provided via the STAF SourceForge webiste), we see > the following (note that libssl.so and libcrypto.so are OpenSSL libraries > and they reside in the /usr/local/staf/lib directory as they are packaged > with the STAF installation binaries): > > # ldd libSTAFTCP.so > libSTAFTCP.so needs: > /usr/lib/libpthread.a(shr_comm.o) > /usr/lib/libpthread.a(shr_xpg5.o) > /usr/local/staf/lib/libSTAF.so > /usr/local/staf/lib/libssl.so > /usr/local/staf/lib/libcrypto.so > /usr/vacpp/lib/libC.a(shr.o) > /usr/vacpp/lib/libC.a(ansi_32.o) > /usr/lib/libc.a(shr.o) > /usr/lib/librtl.a(shr.o) > /usr/lib/libpthreads.a(shr_comm.o) > /unix > /usr/lib/libdl.a(shr.o) > /usr/vacpp/lib/libC.a(shr2.o) > /usr/vacpp/lib/libC.a(ansicore_32.o) > /usr/vacpp/lib/libC.a(shrcore.o) > /usr/vacpp/lib/libC.a(shr3.o) > /usr/lib/libcrypt.a(shr.o) > > Note that your ldd output doesn't include the two OpenSSL libraries > packaged with STAF (/usr/local/staf/lib/libssl.so and > /usr/local/staf/lib/libcrypto.so). > > When building STAF yourself for AIX 4.3, you should have followed the > instructions for building STAF in the STAF Developer's Guide at > http://staf.sourceforge.net/current/stafdg.html#Header_buildOpenSSL. > Section "Building SSL" says: > > Download OpenSSL 0.9.8 source code from the OpenSSL website. Note that we > used OpenSSL 0.9.8e when we built the STAF binaries, though the STAFTCP > connection provider *should* work with any OpenSSL 0.9.8 version. > > However, you said you built STAF using openssl-1.0.0d. I suppose this > could be causing the problem since this version of OpenSSL is later than > the 0.9.8 versions that STAF supports and that I'm guessing you have > installed on your Linux systems to which you're trying to submit a STAF > service request. You should probably google for more information on the > OpenSSL error you're getting: error:1408F10B:SSL > routines:SSL3_GET_RECORD:wrong version number > > Otherwise, I recommend building STAF for AIX 4.3 using OpenSSL 0.9.8e (not > OpenSSL 1.0.0d). > > Or, why not use the STAF installation binaries for STAF V3.3.2 for AIX > which support AIX 4.3.3 (instead of building STAF yourself). > > Note that there have been some fixes made to the STAF ssl interface code > after STAF V3.3.2. > > Or, as a workaround, you could try commenting out the ssl interface in the > /usr/local/staf/bin/STAF.cfg file on your AIX machine so that the tcp > interface is used instead of the ssl interface to communicate with other > STAF machines. > > Also, maybe you are running into a problem where the port number (6550) > that the STAF ssl interface uses is being blocked via a firewall. Section > "3.1.4 Why can't my STAF machines communicate?" in the STAF FAQ at > http://staf.sourceforge.net/current/STAFFAQ.htm#STAF%20machines%20can%27t%20communicate%20due%20to%20DNS%20issues > > talks about how to resolve this issue. > > -------------------------------------------------------------- > Sharon Lucas > IBM Austin, luc...@us.ibm.com > (512) 286-7313 or Tieline 363-7313 > > > > > From: "jander...@talentex.co.uk" <jander...@talentex.co.uk> > To: staf <staf-users@lists.sourceforge.net> > Date: 04/26/2011 10:23 AM > Subject: [staf-users] Problem with ssl > > > > System: AIX 4.3 > SSL: openssl-1.0.0d, compiled from source > STAF: STAF 3.3.2, built from source > > I can't communicate with other servers - here on Debian Linux; I get > the following message on the remote server: > > STAFProc version 3.3.2 initialized > 20110426-17:41:53;1086876560;00000100;Error in server SSL handshake > originating from machine intranet.informatica.com. A possible cause > is a non-secure tcp interface submitted a request to a secure tcp > interface which is not supported. error:1408F10B:SSL > routines:SSL3_GET_RECORD:wrong version number > > I assume this is routed through libSTAFTCP.so, but I can't see it > referring to libssl: > > monodon # ldd libSTAFTCP.so > /usr/lib/librtl.a(shr.o) > /usr/lpp/xlC/lib/libC.a(shr3.o) > /usr/lpp/xlC/lib/libC.a(shr2.o) > /usr/lpp/xlC/lib/libC.a(ansi_32.o) > /usr/lpp/xlC/lib/libC.a(shr.o) > /usr/lib/libdl.a(shr.o) > /usr/lib/libpthreads.a(shr_comm.o) > /usr/lib/libpthreads.a(shr_xpg5.o) > /usr/local/staf/lib/libSTAF.so > /usr/local/staf/lib/libSTAFTCP.so > /usr/lib/libcrypt.a(shr.o) > /usr/lib/libc.a(shr.o) > > How do I proceed from here - any suggestions? Using a newer version of > STAF is not an option, and I have to get it working on this system. > > /jan > > ------------------------------------------------------------------------------ > WhatsUp Gold - Download Free Network Management Software > The most intuitive, comprehensive, and cost-effective network > management toolset available today. Delivers lowest initial > acquisition cost and overall TCO of any competing solution. > http://p.sf.net/sfu/whatsupgold-sd > _______________________________________________ > staf-users mailing list > staf-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/staf-users > > ------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd _______________________________________________ staf-users mailing list staf-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/staf-users
