On one of our AIX 6.1 machines with STAF V3.4.5 installed (using the STAF
installation binaries provided via the STAF SourceForge webiste), we see
the following (note that libssl.so and libcrypto.so are OpenSSL libraries
and they reside in the /usr/local/staf/lib directory as they are packaged
with the STAF installation binaries):
# ldd libSTAFTCP.so
libSTAFTCP.so needs:
/usr/lib/libpthread.a(shr_comm.o)
/usr/lib/libpthread.a(shr_xpg5.o)
/usr/local/staf/lib/libSTAF.so
/usr/local/staf/lib/libssl.so
/usr/local/staf/lib/libcrypto.so
/usr/vacpp/lib/libC.a(shr.o)
/usr/vacpp/lib/libC.a(ansi_32.o)
/usr/lib/libc.a(shr.o)
/usr/lib/librtl.a(shr.o)
/usr/lib/libpthreads.a(shr_comm.o)
/unix
/usr/lib/libdl.a(shr.o)
/usr/vacpp/lib/libC.a(shr2.o)
/usr/vacpp/lib/libC.a(ansicore_32.o)
/usr/vacpp/lib/libC.a(shrcore.o)
/usr/vacpp/lib/libC.a(shr3.o)
/usr/lib/libcrypt.a(shr.o)
Note that your ldd output doesn't include the two OpenSSL libraries
packaged with STAF (/usr/local/staf/lib/libssl.so and
/usr/local/staf/lib/libcrypto.so).
When building STAF yourself for AIX 4.3, you should have followed the
instructions for building STAF in the STAF Developer's Guide at
http://staf.sourceforge.net/current/stafdg.html#Header_buildOpenSSL.
Section "Building SSL" says:
Download OpenSSL 0.9.8 source code from the OpenSSL website. Note that we
used OpenSSL 0.9.8e when we built the STAF binaries, though the STAFTCP
connection provider *should* work with any OpenSSL 0.9.8 version.
However, you said you built STAF using openssl-1.0.0d. I suppose this
could be causing the problem since this version of OpenSSL is later than
the 0.9.8 versions that STAF supports and that I'm guessing you have
installed on your Linux systems to which you're trying to submit a STAF
service request. You should probably google for more information on the
OpenSSL error you're getting: error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number
Otherwise, I recommend building STAF for AIX 4.3 using OpenSSL 0.9.8e (not
OpenSSL 1.0.0d).
Or, why not use the STAF installation binaries for STAF V3.3.2 for AIX
which support AIX 4.3.3 (instead of building STAF yourself).
Note that there have been some fixes made to the STAF ssl interface code
after STAF V3.3.2.
Or, as a workaround, you could try commenting out the ssl interface in the
/usr/local/staf/bin/STAF.cfg file on your AIX machine so that the tcp
interface is used instead of the ssl interface to communicate with other
STAF machines.
Also, maybe you are running into a problem where the port number (6550)
that the STAF ssl interface uses is being blocked via a firewall. Section
"3.1.4 Why can't my STAF machines communicate?" in the STAF FAQ at
http://staf.sourceforge.net/current/STAFFAQ.htm#STAF%20machines%20can%27t%20communicate%20due%20to%20DNS%20issues
talks about how to resolve this issue.
--------------------------------------------------------------
Sharon Lucas
IBM Austin, luc...@us.ibm.com
(512) 286-7313 or Tieline 363-7313
From: "jander...@talentex.co.uk" <jander...@talentex.co.uk>
To: staf <staf-users@lists.sourceforge.net>
Date: 04/26/2011 10:23 AM
Subject: [staf-users] Problem with ssl
System: AIX 4.3
SSL: openssl-1.0.0d, compiled from source
STAF: STAF 3.3.2, built from source
I can't communicate with other servers - here on Debian Linux; I get
the following message on the remote server:
STAFProc version 3.3.2 initialized
20110426-17:41:53;1086876560;00000100;Error in server SSL handshake
originating from machine intranet.informatica.com. A possible cause
is a non-secure tcp interface submitted a request to a secure tcp
interface which is not supported. error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number
I assume this is routed through libSTAFTCP.so, but I can't see it
referring to libssl:
monodon # ldd libSTAFTCP.so
/usr/lib/librtl.a(shr.o)
/usr/lpp/xlC/lib/libC.a(shr3.o)
/usr/lpp/xlC/lib/libC.a(shr2.o)
/usr/lpp/xlC/lib/libC.a(ansi_32.o)
/usr/lpp/xlC/lib/libC.a(shr.o)
/usr/lib/libdl.a(shr.o)
/usr/lib/libpthreads.a(shr_comm.o)
/usr/lib/libpthreads.a(shr_xpg5.o)
/usr/local/staf/lib/libSTAF.so
/usr/local/staf/lib/libSTAFTCP.so
/usr/lib/libcrypt.a(shr.o)
/usr/lib/libc.a(shr.o)
How do I proceed from here - any suggestions? Using a newer version of
STAF is not an option, and I have to get it working on this system.
/jan
------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network
management toolset available today. Delivers lowest initial
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
staf-users mailing list
staf-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/staf-users
------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network
management toolset available today. Delivers lowest initial
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
staf-users mailing list
staf-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/staf-users
