Re: GSKit SSL Handshake error 406 errno 3406

[Scott Klement <rpg400-l@xxxxxxxxxxxxxxxx>]

Brad,

RC=406 (GSK_ERROR_IO) occurs when an error occurs during 
communication... in other words, the error isn't in the SSL processing, 
it's on the call to a socket API to retrieve/send data.

The errno 3426 (ECONNRESET) means that the connection was disconnected, 
and it wasn't expected to be.  According to standards, the 'reset' 
should indicate some sort of protocol error, i.e. the remote server 
detected a violation of the protocol, so disconnected you.   I've found 
this isn't always the case, and remote sites will send a 'reset' to 
indicate any sort of problem.  I guess we don't live in a perfect world ;-)

Possibly the disconnect is due to the obsolete cipher, as you say?    
You could try configuring the system or application to not use that 
cipher and see if that helps?

Not sure what else to suggest...

-SK

On 5/12/2020 3:01 PM, B Stone wrote:
> I'm getting the following on an SSL handshake with an endpoint:
>
> RC(406) errno(3426)
>
> Now, I can't find exactly what that means except "connection reset".
>
> When I look at the certificate it does say it's using an obsolete cipher.
> That's the only reason I could think this issue is occurring as connection
> works via browser.
>
> Running V7R4.
>
> Thanks.