To establish SSL/TLS communication between two systems the systems negotiate to determine the most secure cipher and protocol that is supported and allowed on both systems.  If that negotiation fails, it is usually because the SSL/TLS support on one of the systems is seriously down level from the other and only supports ciphers or protocols that are now disallowed by the newer system -- because the newer system now considers some older techniques too insecure to be safely used.  If that's the problem, SSL/TLS support on the down-level system should be upgraded, since the whole point of using SSL/TLS is to have secure transmission in today's environment.   To some extent allowed ciphers can be controlled by configuration files, but you  can't allow a technique when the system lacks support for it.

    Joel C Ewing

On 12/10/22 19:05, Charles Mills wrote:
https://www.ibm.com/docs/en/zos/2.4.0?topic=messages-ezd1285i

Charles

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Crusty Old Guy
Sent: Friday, December 9, 2022 8:47 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Interpreting SEND/RECV CIPHERs

0090 EZD1285I TTLS Data CONNID: 00000014 SEND CIPHER 1503020002020A
The 1503020002020A is an SSL alert packet with a fatal error: Unexpected message
This brief interchange comes from the archives.  I need to find the meaning of 
a different cipher.

I've gone through "IP Diagnosis" and didn't find any clues.

Can anyone help?

Thank you,
COG

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
Joel C. Ewing

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to