Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

asked 2025-04-08 13:52:36 +0000

Ronnie gravatar image

SSL connection failing

Help! We converted to a new IBM iSeries (AS400). Since the conversion I can't connect to our EDI trading partner's FTP server using SSL. I sill have access to our old AS400 and it connects fine. However when I attempt to connect with my new server the connection hangs after "234 AUTH TLS successful". In the pcap file, after sending "Client Hello" I get back "TCP Previous segment not captured".

The two AS400 servers are different models, but the OS, user data and configuration was copied and reloaded to the new server. (i.e. a complete scratch load of the OS). So the two system should be identical from an OS perspective.

I asked tech support on the FTP server side to send me a new CA certificate, which I installed. Still didn't help.

Below is a screen capture of the pcap file. (I can't upload attachments yet).

Blockquote 5Ø22 21 Seq—ø Win-65535 Len-e mss-146ø WS-16 TSva1-415Ø3ØØØ TSecr-Ø 21 5Ø22[SYN Ack=l Win=3212ø cen=ø mss=146ø 5Ø22 21 [ACK] Seq=l Ack=l Win-65535 Len=ø Response: 220 104.42.213.85 FTP server ready Request: AUTH TLS 21 5Ø22 [ACK] Seq=37 Ack=ll Win-32110 Response: 234 AUTH TLS successful Client Hello (TCP Previous segment not captured] , Continuation Data [TCP Dup ACK 8±1] 5Ø22 -+ 21 [PSH, ACK] Seq-154 Ack-62 Win-65535 Len-e Continuation Data Dup ACK 8*2] 5Ø22 21 [PSH, Seq=154 Ack=62 Win=6SS3S Len=ø Response: 55B TLS handshake failed Dup ACK 8#3] se22 21 [PSH, Seq-154 Ack-62 Win-6SS35 Len-e 22271 21 [SYN] seq=ø Win-65535 Len-e mss=146ø ws=16 Tsva1=42øueøe Tsecr=ø 21 22271 SYN ACKI Seq=ø Ack=l Win—3212ø Len—e mss=146ø 22271 21 CACKI Seq=l Ack=l Kin-65535 Len-e

SSL connection failing

Help! We converted to a new IBM iSeries (AS400). Since the conversion I can't connect to our EDI trading partner's FTP server using SSL. I sill have access to our old AS400 and it connects fine. However when I attempt to connect with my new server the connection hangs after "234 AUTH TLS successful". In the pcap file, after sending "Client Hello" I get back "TCP Previous segment not captured".

The two AS400 servers are different models, but the OS, user data and configuration was copied and reloaded to the new server. (i.e. a complete scratch load of the OS). So the two system should be identical from an OS perspective.

I asked tech support on the FTP server side to send me a new CA certificate, which I installed. Still didn't help.

Below is a screen capture of the pcap file. (I can't upload attachments yet).

Blockquote 5Ø22 21 Seq—ø Win-65535 Len-e mss-146ø WS-16 TSva1-415Ø3ØØØ TSecr-Ø TSecr-Ø

21 5Ø22[SYN Ack=l Win=3212ø cen=ø mss=146ø mss=146ø

5Ø22 21 [ACK] Seq=l Ack=l Win-65535 Len=ø Len=ø

Response: 220 104.42.213.85 FTP server ready Request: AUTH TLS 21 5Ø22 [ACK] Seq=37 Ack=ll Win-32110 Response: 234 AUTH TLS successful Client Hello (TCP Previous segment not captured] , Continuation Data [TCP Dup ACK 8±1] 5Ø22 -+ 21 [PSH, ACK] Seq-154 Ack-62 Win-65535 Len-e Continuation Data Dup ACK 8*2] 5Ø22 21 [PSH, Seq=154 Ack=62 Win=6SS3S Len=ø Response: 55B TLS handshake failed Dup ACK 8#3] se22 21 [PSH, Seq-154 Ack-62 Win-6SS35 Len-e 22271 21 [SYN] seq=ø Win-65535 Len-e mss=146ø ws=16 Tsva1=42øueøe Tsecr=ø 21 22271 SYN ACKI Seq=ø Ack=l Win—3212ø Len—e mss=146ø 22271 21 CACKI Seq=l Ack=l Kin-65535 Len-e

SSL connection failing

Help! We converted to a new IBM iSeries (AS400). Since the conversion I can't connect to our EDI trading partner's FTP server using SSL. I sill have access to our old AS400 and it connects fine. However when I attempt to connect with my new server the connection hangs after "234 AUTH TLS successful". In the pcap file, after sending "Client Hello" I get back "TCP Previous segment not captured".

The two AS400 servers are different models, but the OS, user data and configuration was copied and reloaded to the new server. (i.e. a complete scratch load of the OS). So the two system should be identical from an OS perspective.

I asked tech support on the FTP server side to send me a new CA certificate, which I installed. Still didn't help.

Below is a screen capture of the pcap file. (I can't upload attachments yet).

Blockquote Blockquote

5Ø22 21 Seq—ø Win-65535 Len-e mss-146ø WS-16 TSva1-415Ø3ØØØ TSecr-Ø

21 5Ø22[SYN Ack=l Win=3212ø cen=ø mss=146ø

5Ø22 21 [ACK] Seq=l Ack=l Win-65535 Len=ø

Response: 220 104.42.213.85 FTP server ready ready

Request: AUTH TLS TLS

21 5Ø22 [ACK] Seq=37 Ack=ll Win-32110 Win-32110

Response: 234 AUTH TLS successful successful

Client Hello Hello

(TCP Previous segment not captured] , Continuation Data Data

[TCP Dup ACK 8±1] 5Ø22 -+ 21 [PSH, ACK] Seq-154 Ack-62 Win-65535 Len-e Len-e

Continuation Data Data

Dup ACK 8*2] 5Ø22 21 [PSH, Seq=154 Ack=62 Win=6SS3S Len=ø Len=ø

Response: 55B TLS handshake failed failed

Dup ACK 8#3] se22 21 [PSH, Seq-154 Ack-62 Win-6SS35 Len-e Len-e

22271 21 [SYN] seq=ø Win-65535 Len-e mss=146ø ws=16 Tsva1=42øueøe Tsecr=ø Tsecr=ø

21 22271 SYN ACKI Seq=ø Ack=l Win—3212ø Len—e mss=146ø mss=146ø

22271 21 CACKI Seq=l Ack=l Kin-65535 Len-e

click to hide/show revision 4
None

updated 2025-04-08 14:02:35 +0000

grahamb gravatar image

SSL connection failing

Help! We converted to a new IBM iSeries (AS400). Since the conversion I can't connect to our EDI trading partner's FTP server using SSL. I sill have access to our old AS400 and it connects fine. However when I attempt to connect with my new server the connection hangs after "234 AUTH TLS successful". In the pcap file, after sending "Client Hello" I get back "TCP Previous segment not captured".

The two AS400 servers are different models, but the OS, user data and configuration was copied and reloaded to the new server. (i.e. a complete scratch load of the OS). So the two system should be identical from an OS perspective.

I asked tech support on the FTP server side to send me a new CA certificate, which I installed. Still didn't help.

Below is a screen capture of the pcap file. (I can't upload attachments yet).

Blockquote

5Ø22 21 Seq—ø Win-65535 Len-e mss-146ø WS-16 TSva1-415Ø3ØØØ TSecr-Ø
 
21 TSecr-Ø21 5Ø22[SYN Ack=l Win=3212ø cen=ø mss=146ø
 
mss=146ø
5Ø22 21 [ACK] Seq=l Ack=l Win-65535 Len=ø
 
Len=ø
Response: 220 104.42.213.85 FTP server ready
 
ready
Request: AUTH TLS
 
TLS
21 5Ø22 [ACK] Seq=37 Ack=ll Win-32110
 
Win-32110
Response: 234 AUTH TLS successful
 
successful
Client Hello
 
Hello
(TCP Previous segment not captured] , Continuation Data
 
Data
[TCP Dup ACK 8±1] 5Ø22 -+ 21 [PSH, ACK] Seq-154 Ack-62 Win-65535 Len-e
 
Len-e
Continuation Data
 
Data
Dup ACK 8*2] 5Ø22 21 [PSH, Seq=154 Ack=62 Win=6SS3S Len=ø
 
Len=ø
Response: 55B TLS handshake failed
 
failed
Dup ACK 8#3] se22 21 [PSH, Seq-154 Ack-62 Win-6SS35 Len-e
 
Len-e
22271 21 [SYN] seq=ø Win-65535 Len-e mss=146ø ws=16 Tsva1=42øueøe Tsecr=ø
 
Tsecr=ø
21 22271 SYN ACKI Seq=ø Ack=l Win—3212ø Len—e mss=146ø
 
mss=146ø
22271 21 CACKI Seq=l Ack=l Kin-65535 Len-e
Len-e

SSL connection failing

Help! We converted to a new IBM iSeries (AS400). Since the conversion I can't connect to our EDI trading partner's FTP server using SSL. I sill have access to our old AS400 and it connects fine. However when I attempt to connect with my new server the connection hangs after "234 AUTH TLS successful". In the pcap file, after sending "Client Hello" I get back "TCP Previous segment not captured".

The two AS400 servers are different models, but the OS, user data and configuration was copied and reloaded to the new server. (i.e. a complete scratch load of the OS). So the two system should be identical from an OS perspective.

I asked tech support on the FTP server side to send me a new CA certificate, which I installed. Still didn't help.

Below is a screen capture of Hopefully the pcap file. (I can't upload attachments yet).links below work.

5Ø22 21 Seq—ø Win-65535 Len-e mss-146ø WS-16 TSva1-415Ø3ØØØ TSecr-Ø21 5Ø22[SYN Ack=l Win=3212ø cen=ø mss=146ø
5Ø22 21 [ACK] Seq=l Ack=l Win-65535 Len=ø
Response: 220 104.42.213.85 FTP server ready
Request: AUTH TLS
21 5Ø22 [ACK] Seq=37 Ack=ll Win-32110
Response: 234 AUTH TLS successful
Client Hello
(TCP Previous segment not captured] , Continuation Data
[TCP Dup ACK 8±1] 5Ø22 -+ 21 [PSH, ACK] Seq-154 Ack-62 Win-65535 Len-e
Continuation Data
Dup ACK 8*2] 5Ø22 21 [PSH, Seq=154 Ack=62 Win=6SS3S Len=ø
Response: 55B TLS handshake failed
Dup ACK 8#3] se22 21 [PSH, Seq-154 Ack-62 Win-6SS35 Len-e
22271 21 [SYN] seq=ø Win-65535 Len-e mss=146ø ws=16 Tsva1=42øueøe Tsecr=ø
21 22271 SYN ACKI Seq=ø Ack=l Win—3212ø Len—e mss=146ø
22271 21 CACKI Seq=l Ack=l Kin-65535 Len-e

https://www.dropbox.com/scl/fi/hdas9dgk4e9prx1577x86/old_server.pcap?rlkey=txz7ojncq4kdby1qv8mvriusi&st=x6693i3o&dl=0

https://www.dropbox.com/scl/fi/1fxti02f5lv2z4qlh5ot2/new_server.pcap?rlkey=deqv34v02kcylcl0ml2zdki7o&st=k55ul61u&dl=0