Re: No new SSL-telnet connections

On Mon, 9 Nov 2015, James Rich wrote:

I've got a bit of a puzzle here. Existing SSL telnet connections work fine, but trying to start a new SSL telnet connection either doesn't work at all, or in one case, took 20 minutes to connect. I've checked that the certificates are ok and both the CA certificate and the server certificate are ok until next year. Firewall isn't the problem as this is occurring over the LAN as well, plus as I mentioned, existing SSL telnet connections are working just fine. Any ideas where I should look?

A little more information on this puzzle. Suddenly SSL connections are working, with no apparent changes at all. Nothing was restarted, no error messages ever logged. But for nearly 24 hours new SSL connections either wouldn't start at all or would be extremely slow to start. Doing a NETSTAT revealed that the iSeries was receiving bytes from the client but showed zero bytes sent. We are still scratching our heads over this. We don't know why it stopped working or why it suddenly started working. The one oddity is that many of the new connections are now coming in under QCTL instead of QINTER. Any more thoughts?

James Rich