Re: SSL Handshake Error 415 (Peer not recognized)

Yes, it was in the random data.  They sent me a screenshot otherwise I'd
copy and paste it to an email.

On Thu, Jun 3, 2021 at 4:02 PM Gerald Magnuson <[email protected]>
wrote:

> was the old date and time from the client hello...   in the Random data?
>
>
> On Thu, Jun 3, 2021 at 3:48 PM Gerald Magnuson <[email protected]
> >
> wrote:
>
> > I still have the wireshark trace,  but I didn't flag the bad packet.
> > looking through it, I see lots of short hello's but the data/time looks
> > right to me.
> >
> >
> >
> > On Thu, Jun 3, 2021 at 3:18 PM Gerald Magnuson <
> [email protected]>
> > wrote:
> >
> >> I seem to recall that was the issue with us,  that the packet that
> >> wireshark flagged as in error (that IBM asked us to figure out why it
> was
> >> bad)
> >> had a bad date/time in it.
> >>
> >>
> >>
> >> On Thu, Jun 3, 2021 at 7:48 AM Brad Stone <[email protected]> wrote:
> >>
> >>> But that timestamp comes from the IBM i and the time and date are set
> >>> correctly.  It's during the SSL negotiation.  It doesn't always send
> it,
> >>> but when it does, it's from the wayback machine.  Not sure how it's
> >>> getting
> >>> that date/time.
> >>>
> >>> On Wed, Jun 2, 2021 at 4:46 PM Charles Wilt <[email protected]>
> >>> wrote:
> >>>
> >>> > That right there is probably your issue...
> >>> >
> >>> > IIRC, SSL/TLS won't work unless the clocks on both sides are
> correct...
> >>> >
> >>> > Charles
> >>> >
> >>> >
> >>> > On Wed, Jun 2, 2021 at 3:23 PM Brad Stone <[email protected]> wrote:
> >>> >
> >>> > > Ok, Thanks.  I must have dreamt you posted a solution, or that IBM
> >>> > figured
> >>> > > it out.
> >>> > >
> >>> > > What's weird in this case with a customer is when it happens it
> sends
> >>> > > across a date and time that is in the 1980s during the client
> hello.
> >>> > >
> >>> > >
> >>> > >
> >>> > > On Wed, Jun 2, 2021 at 12:33 PM Gerald Magnuson <
> >>> > > [email protected]>
> >>> > > wrote:
> >>> > >
> >>> > > > I have not found a solution as of yet.
> >>> > > >
> >>> > > > I am on most current PTF levels, and problem is still occurring.
> >>> > > >
> >>> > > >
> >>> > > >
> >>> > > > On Wed, Jun 2, 2021 at 11:54 AM Brad Stone <[email protected]>
> >>> wrote:
> >>> > > >
> >>> > > > > I thought I had seen where Gerald or someone else had posted
> >>> that IBM
> >>> > > > > finally figured out this SSL Handshake error with errno 415.
> >>> > > > >
> >>> > > > > RC(415) Peer not recognized or badly formatted message
> received.
> >>> > > > >
> >>> > > > > I can't find it in the archives.  Was that a dream?  :)
> >>> > > > >
> >>> > > > > Bradley V. Stone
> >>> > > > > www.bvstools.com
> >>> > > > > Native IBM i e-Mail solutions for Microsoft Office 365, Gmail,
> >>> or any
> >>> > > > Cloud
> >>> > > > > Provider!
> >>> > > > > --
> >>> > > > > This is the Web Enabling the IBM i (AS/400 and iSeries)
> (WEB400)
> >>> > > mailing
> >>> > > > > list
> >>> > > > > To post a message email: [email protected]
> >>> > > > > To subscribe, unsubscribe, or change list options,
> >>> > > > > visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> > > > > or email: [email protected]
> >>> > > > > Before posting, please take a moment to review the archives
> >>> > > > > at https://archive.midrange.com/web400.
> >>> > > > >
> >>> > > > >
> >>> > > > --
> >>> > > > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> >>> > mailing
> >>> > > > list
> >>> > > > To post a message email: [email protected]
> >>> > > > To subscribe, unsubscribe, or change list options,
> >>> > > > visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> > > > or email: [email protected]
> >>> > > > Before posting, please take a moment to review the archives
> >>> > > > at https://archive.midrange.com/web400.
> >>> > > >
> >>> > > >
> >>> > > --
> >>> > > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> >>> mailing
> >>> > > list
> >>> > > To post a message email: [email protected]
> >>> > > To subscribe, unsubscribe, or change list options,
> >>> > > visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> > > or email: [email protected]
> >>> > > Before posting, please take a moment to review the archives
> >>> > > at https://archive.midrange.com/web400.
> >>> > >
> >>> > >
> >>> > --
> >>> > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> >>> mailing
> >>> > list
> >>> > To post a message email: [email protected]
> >>> > To subscribe, unsubscribe, or change list options,
> >>> > visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> > or email: [email protected]
> >>> > Before posting, please take a moment to review the archives
> >>> > at https://archive.midrange.com/web400.
> >>> >
> >>> >
> >>> --
> >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>> list
> >>> To post a message email: [email protected]
> >>> To subscribe, unsubscribe, or change list options,
> >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> or email: [email protected]
> >>> Before posting, please take a moment to review the archives
> >>> at https://archive.midrange.com/web400.
> >>>
> >>>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.