Re: Yet another error accessing a web service

I found something in the QSSLCSL system value.

There are only three entries in the list:

*RSA_AES_128_CBC_SHA
*RSA_AES_256_CBC_SHA
*RSA_3DES_EDE_CBC_SHA

For the web service, examining an SSLLabs scan report, the closest matches I see to these are:

TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)
TLS_RSA_WITH_AES_256_CBC_SHA (0x35)

both of which are near the bottom of the list, and marked "WEAK."

Comparing two other customer boxes (both V7R3), I see 22 entries, including two that look like they might match much stronger ciphers on the scan report.

And note: on the "problem" box, QSSLCSLCTL is *USRDFN.

--
JHHL