FC1028 authServer: secure_socket_init failed with rc = 420

Todo lo relacionado con VTAM, TCP/IP, OSA/SF, configuración de placas OSA, VIPA, etc.
Responder
armandojrivas
Usuario
Usuario
Mensajes: 6
Registrado: 10 Ago 2015, 11:55
País: venezuela
Ciudad: caracas
Ocupación: System Programmer

FC1028 authServer: secure_socket_init failed with rc = 420

Mensaje por armandojrivas » 22 Mar 2016, 15:31

Buenos dias amigo, ante todo los saludo.
Acudo a sus buenos conocimientos a ver si ustedes ya han pasado por esta experiencia.
Hemos migrado del z/os 1.13 a 2.1. Todo bien pero con respecto al FTP con SSL/TLS, tenemos un error que hasta ahora no hemos podido resolver, acudo a ustedes a ver si me ayudan. El error es el siguiente:
1
EZA1736I FTP
EZY2640I Using dd:SYSFTPD=SOPTEC.B593710.JCL.CNTL(FTPSDES5) for local site configuration parameters.
GU5279 dspyFixLevel: Fix Level: NONEFND Data: EZBOECPR
GU5279 dspyFixLevel: Fix Level: " Data: EZAAE061 20120730230600010100
GU5279 dspyFixLevel: Fix Level: HIP6210 Data: EZAFTPMG EZAFTPC1 EZAFTPDA EZAFTPGA
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPG1 EZAFTPG2 EZAFTPIO EZAFTPMA
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPMB EZAFTPMC EZAFTPMU EZAFTPMW
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPMZ EZBCRSTK EZBMSGMC EZBMSGMI
GU5279 dspyFixLevel: Fix Level: " Data: EZBMSGPL EZBPAGLU EZBPAINX EZBWTOCR
GU5279 dspyFixLevel: Fix Level: " Data: EZBWTODM EZAFTPCA EZAFTPCB EZAFTPCC
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPCK EZAFTPCL EZAFTPCP EZAFTPCR
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPCT EZAFTPCX EZAFTPED EZAFTPET
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPGV EZAFTPMK EZAFTPMQ EZAFTPMV
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPMY EZAFTPNC EZAFTPNX EZAFTPNY
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPPC EZBMSTCC
GU5279 dspyFixLevel: Fix Level: UI13000 Data: EZAFTPMD
GU5279 dspyFixLevel: Fix Level: UI14131 Data: EZAFTPTI
GU5279 dspyFixLevel: Fix Level: UI15211 Data: EZAFTPCV
GU5279 dspyFixLevel: Fix Level: UI17736 Data: EZAFTPCF
GU5279 dspyFixLevel: Fix Level: UI20775 Data: EZAFTPCD
GU5279 dspyFixLevel: Fix Level: UI21355 Data: EZAFTPMR
GU5279 dspyFixLevel: Fix Level: UI21554 Data: EZAFTPMF
GU5279 dspyFixLevel: Fix Level: UI25684 Data: EZAFTPCU EZAFTPCY EZAFTPEA EZAFTPEP
GU5279 dspyFixLevel: Fix Level: " Data: EZAFTPER EZAFTPFC EZAFTPFU
GU5279 dspyFixLevel: Fix Level: UK94777 Data: EZAITUTI
GU5279 dspyFixLevel: Fix Level: UK96154 Data: EZAFTPF4
GU5279 dspyFixLevel: Fix Level: UK97738 Data: EZAFTPCZ EZAFTPEJ EZAFTPGU EZAFTPSC
GU5279 dspyFixLevel: Fix Level: UK98646 Data: EZAFTPCG EZAFTPTO
GU5279 dspyFixLevel: Fix Level: 66/ 66 Data: OBJECTS PROCESSED. AV-BUFR: 0003647
EP0745 processStatement: entered
ET0382 tracecapi: entered
EP0745 processStatement: entered
EJ0846 logclienterr: entered
EP0745 processStatement: entered
EA1458 clienterrcodes: entered
EP0745 processStatement: entered
EA1496 clientexit: entered
EP0745 processStatement: entered
ED0620 debugx: entered
EP0745 processStatement: entered
ED0620 debugx: entered
EP2394 get_str_val: entered
GU3183 setDebug: entered
EP0745 processStatement: entered
ED0620 debugx: entered
EP2394 get_str_val: entered
GU3183 setDebug: entered
EP0745 processStatement: entered
ED0620 debugx: entered
EP2394 get_str_val: entered
GU3183 setDebug: entered
EP0745 processStatement: entered
ED0620 debugx: entered
EP2394 get_str_val: entered
GU3183 setDebug: entered
EP0745 processStatement: entered
ED0620 debugx: entered
EP2394 get_str_val: entered
GU3183 setDebug: entered
EP0745 processStatement: entered
ED0620 debugx: entered
EP2394 get_str_val: entered
GU3183 setDebug: entered
EP0745 processStatement: entered
EZYFT47I dd:SYSFTPD=SOPTEC.B593710.JCL.CNTL(FTPSDES5) file, line 14: Ignoring keyword "DEBUGONSITE".
EP0745 processStatement: entered
EZYFT47I dd:SYSFTPD=SOPTEC.B593710.JCL.CNTL(FTPSDES5) file, line 15: Ignoring keyword "ACCESSERRORMSGS".
EP0745 processStatement: entered
ED1663 ftpkeepalive: entered
EP2335 get_num_val: entered
EP2658 chk_integer: entered
EP0745 processStatement: entered
ED1286 extensions: entered
EP2394 get_str_val: entered
EZYFT47I dd:SYSFTPD=SOPTEC.B593710.JCL.CNTL(FTPSDES5) file, line 20: Ignoring keyword "EXTENSIONS".
EP0745 processStatement: entered
ET0117 tlsmechanism: entered
EP2394 get_str_val: entered
EZYFT46E Error in dd:SYSFTPD=SOPTEC.B593710.JCL.CNTL(FTPSDES5) file: line 22 near column 1.
EZY2642E Unknown keyword: PROT
EP0745 processStatement: entered
ER1341 secure_mechanism: entered
EP2394 get_str_val: entered
EP0745 processStatement: entered
EJ0734 keyring: entered
EP2394 get_str_val: entered
EP0745 processStatement: entered
EA1370 ciphersuite: entered
EP2394 get_str_val: entered
EA1640 verifyCipherSuite: entered
GU4226 checkSpec: entered with SSL_RC4_MD5 (1,3)
EP0745 processStatement: entered
EA1370 ciphersuite: entered
EP2394 get_str_val: entered
EA1640 verifyCipherSuite: entered
GU4226 checkSpec: entered with SSL_RC4_MD5_EX (1,3)
EP0745 processStatement: entered
EA1370 ciphersuite: entered
EP2394 get_str_val: entered
EA1640 verifyCipherSuite: entered
GU4226 checkSpec: entered with SSL_3DES_SHA (1,3)
EP0745 processStatement: entered
EA1370 ciphersuite: entered
EP2394 get_str_val: entered
EA1640 verifyCipherSuite: entered
GU4226 checkSpec: entered with SSL_DES_SHA (1,3)
EP0745 processStatement: entered
EA1370 ciphersuite: entered
EP2394 get_str_val: entered
EA1640 verifyCipherSuite: entered
GU4226 checkSpec: entered with SSL_NULL_MD5 (1,3)
EP0745 processStatement: entered
EA1370 ciphersuite: entered
EP2394 get_str_val: entered
EA1640 verifyCipherSuite: entered
GU4226 checkSpec: entered with SSL_NULL_SHA (1,3)
EP0745 processStatement: entered
ER1133 secure_ftp: entered
EP2394 get_str_val: entered
EP0745 processStatement: entered
ER0977 secure_ctrlconn: entered
EP2394 get_str_val: entered
EP0745 processStatement: entered
ER1053 secure_dataconn: entered
EP2394 get_str_val: entered
EP0745 processStatement: entered
ET0292 tlstimeout: entered
EP2335 get_num_val: entered
EP2658 chk_integer: entered
EP0745 processStatement: entered
ET0229 tlsrfclevel: entered
EP2394 get_str_val: entered
EP0745 processStatement: entered
EJ1646 passiveignoreaddr: entered
EP2241 get_bool_val: entered
EP0745 processStatement: entered
EP2241 get_bool_val: entered
EP0745 processStatement: entered
ED1786 fwfriendly: entered
EP2241 get_bool_val: entered
EP0745 processStatement: entered
ET0175 tlsport: entered
EP2335 get_num_val: entered
EP2658 chk_integer: entered
GU1383 get_recfm_values: entered
EP2833 check_anonymous_keyword_consistency: entered
EP2912 check_utf8_keyword_consistency: entered
CY2593 ftpSocks: entered
CY2486 findSocks: entered
CY1122 ftpStart: ftp.data processing is complete.
GU1055 chkVerRel: entered
GU1127 chkVerRel: system information for TEST: z/OS version 2 release 1 (2827)
NX0221 setup_translate_tables: entered
NX0951 read_xlate_files: entered
NX1111 read_xlate_files: DSSTAT return code -1 for //'B593710.FTP.TCPXLBIN
NX1121 read_xlate_files: DSSTAT return code -1 for //'TCPIP.FTP.TCPXLBIN
NX1131 read_xlate_files: DSSTAT return code -1 for //'B593710.STANDARD.TCPXLBIN
NY0234 process_xlate_table: entered
EZYFT25I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the control connection.
NX0951 read_xlate_files: entered
NX1111 read_xlate_files: DSSTAT return code -1 for //'B593710.FTP.TCPXLBIN
NX1121 read_xlate_files: DSSTAT return code -1 for //'TCPIP.FTP.TCPXLBIN
NX1131 read_xlate_files: DSSTAT return code -1 for //'B593710.STANDARD.TCPXLBIN
NY0234 process_xlate_table: entered
EZYFT31I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the data connection.
EP2559 set_dbcs_langs: entered
EP2571 set_dbcs_langs: __ipdbcs() returned 0 parms from LOADDBCSTABLES statement(s)
EZA1450I IBM FTP CS V2R1
EZA1466I FTP: using TCPIPROC
EZA1772I FTP: EXIT has been set.
CU0409 getCommand: entered
EZA1456I Connect to ?
CU3610 CheckForSequenceNumbers: entered
EZA1736I 10.7.0.19
CY1323 ftpStart: start parameter processing complete.
EZYFT18I Using catalog '/usr/lib/nls/msg/C/ftpdmsg.cat' for FTP messages.
CU3964 defineUserExit: entered
CU3964 defineUserExit: entered
CY1476 ftpStart: socket() failed on AF_INET6 - EDC8114I Address family not supported. (errno2=0x112B0000)
CY1484 ftpStart: client operating in IPv4 only mode
CZ0324 ftpOpen: entered
CU4010 queryUserExit: entered
CU4028 queryUserExit: CSVDYNEX QUERY failed for user exit EZAFCCMD, RETURN CODE x'4' REASON CODE x'406'
CU4010 queryUserExit: entered
CU4028 queryUserExit: CSVDYNEX QUERY failed for user exit EZAFCREP, RETURN CODE x'4' REASON CODE x'406'
GU5304 initADcontainer: entered
GU5304 initADcontainer: entered
SC0494 initConnection: entered
SC0939 initIPv4Connection: entered
CY3283 access_via_socks_server: entered
EZA1554I Connecting to: 10.7.0.19 port: 21.
SC3261 getReply: entered
SC4327 getNextReply: entered with waitForData = TRUE
220 Microsoft FTP Service
SC4019 getLastReply: entered
SC4019 getLastReply: entered
SC7379 update_cntl_appldata: entered
GU5349 ftpSetApplData: entered
FC0226 ftpAuth: entered
FC0261 ftpAuth: security values: mech=TLS, tlsmech=FTP, sFTP=A, sCC=P, sDC=P
FC0308 ftpAuth: ........ cipherspecs = 04030A090102
FC0353 ftpAuth: environment_open()
FC0489 ftpAuth: environment_init()
FC0498 ftpAuth: environment initialization complete
SC2798 sendCmd: entered
EZA1701I >>> AUTH TLS
SC3261 getReply: entered
SC4327 getNextReply: entered with waitForData = TRUE
234 AUTH command ok. Expecting TLS Negotiation.
SC4019 getLastReply: entered
FC0935 authServer: entered
FC0948 authServer: secure_socket_open()
SC4183 getFNDELAY: entered
FC1015 authServer: secure_socket_init()
FU0684 secureWrite: entered
FU0584 secureRead: entered
SC4218 setFNDELAY: entered
FC1028 authServer: secure_socket_init failed with rc = 420 (Socket closed by remote partner)
FC1418 endSecureConn: entered
EZA2897I Authentication negotiation failed
FC1450 endSecureEnv: entered
SC4067 inSession: entered
EZA1534I *** Control connection with 10.7.0.19 dies.
SC4110 SETCEC code = 10
SC3509 endSession: entered (sn=2C801B10)
SC2675 dataClose: entered
CZ1434 ftpClose: entered
SC4067 inSession: entered
SC4145 setLoggedIn: entered
EZA1457I You must first issue the 'OPEN' command
PC1047 logClientErrMsg: entered
PC0945 setClientRC: entered
SC4019 getLastReply: entered
PC1015 setClientRC: std_rc=10234, rc_type=CEE, rc=1010
CX0375 main: error and exit on error
SC4019 getLastReply: entered
CX0389 main: RC=-0001 cmd_in_progress=10
CX0392 main: last_reply= 234 err=10
EZA1735I Std Return Code = 10234, Error Code = 00010
CZ1354 ftpQuit: entered
CZ1434 ftpClose: entered
SC4067 inSession: entered
SC4145 setLoggedIn: entered
CZ1434 ftpClose: entered
SC4067 inSession: entered
SC4145 setLoggedIn: entered
CX0522 removeAff: entered

Se les agradece su atención y ayuda al respecto, un abrazo a todos.

Camilo Moreno
Usuario
Usuario
Mensajes: 1
Registrado: 22 Oct 2009, 12:03
País: Argentina
Ciudad: Buenos Aires
Ocupación: System Programmer

Re: FC1028 authServer: secure_socket_init failed with rc = 4

Mensaje por Camilo Moreno » 29 Mar 2016, 12:21

Hola!
A partir de la versión 2.1 SSLv3 está deshabilitado por defecto. Para utilizar SSSv3 deberías agregar en el profile:
SSLV3 TRUE

Saludos!

armandojrivas
Usuario
Usuario
Mensajes: 6
Registrado: 10 Ago 2015, 11:55
País: venezuela
Ciudad: caracas
Ocupación: System Programmer

Re: FC1028 authServer: secure_socket_init failed with rc = 4

Mensaje por armandojrivas » 29 Mar 2016, 17:36

Gracias estimado Camilo eres muy amable.
Ya tengo el SSLV3 TRUE en el profile, sin embargo aun presentamos el mismo error.

Este error nos esta retrasando la migracion del 2.1 a producción debido que tenemos mucho intercambio de información usando SSL/TLS.
Nuevamente gracias estimado.
Nosotros seguimos estudiando el caso.
NOTA: EL caso fué elevado a IBM Laboratorio el dia de hoy, esperaremos por su respuesta. Sin embargo nosotros seguimos aca investigando y probando que es la mejor manera de aprender.

Muchas gracias y saludos

Responder