DFHSO0123


    Explanation
      A non-zero return code rc was received from the specified function of the z/OS System SSL service. A brief interpretation of the return code is shown. The service was processing a connection with a partner at IP address peeraddr to TCPIPSERVICE tcpipservice. When the error reason is certificate related the CERTIFICATE named on the TCPIPSERVICE resource is checked.

    
    System action
      The secure sockets operation is abandoned. A sockets domain severe error message, DFHSO0002, may be produced with error code X'080C'.

    
    User response
      If this message is not accompanied by message DFHSO0002, the error is probably due to some unexpected action by the connected partner, and this message is for information only. If this message is accompanied by message DFHSO0002, the error is probably due to some sort of configuration error. If the message shows Peer: 0.0.0.0, TCPIPSERVICE: *NONE* the error is probably due to a PERFORM SSL REBUILD failure. A PERFORM SSL REBUILD failure should preserve the old SSL environment. Use the description in the message to determine what is wrong. For descriptions of the return code rc (which is in decimal and may need converting to hex), see z/OS Cryptographic Services: System SSL Programming, SC24-5901. For further guidance see the Connecting CICS to other systems.

      If the brief interpretation of the return code is Certificate date invalid the certificate may either have expired or be not yet valid, and may refer to either the local certificate or the remote partner's certificate.

      If the brief interpretation of the return code is No certificate available the certificate may have been recently added to the keyring. Issue a PERFORM SSL REBUILD to refresh the SSL environment.

      If the brief interpretation of the return code is Certificate validation failed then either the server or client certificate (if client certificates are being used) is invalid.

    
    Module
DFHSOSE

    XMEOUT parameters/Message inserts
      
      
          date
        

          time
        

          applid
        

          rc
        

        Value chosen from the following options:

              
                0=unknown, 
              

                11=gsk_environment_init, 
              

                12=gsk_environment_open, 
              

                13=gsk_environment_close, 
              

                14=gsk_secure_socket_init, 
              

                15=gsk_secure_socket_open, 
              

                16=gsk_secure_socket_close, 
              

                17=gsk_secure_socket_read, 
              

                18=gsk_secure_socket_write, 
              

                19=gsk_attribute_set_buffer, 
              

                20=gsk_attribute_set_callback, 
              

                21=gsk_attribute_set_enum, 
              

                22=gsk_attribute_set_numeric_value
              

        Value chosen from the following options:

              
                0=Unrecognized return code, 
              

                1=Key database not found, 
              

                2=Key database access not authorized, 
              

                3=Invalid password for key database, 
              

                4=Expired password for key database, 
              

                5=Stashed password file not found, 
              

                6=Session timeout value is invalid, 
              

                7=An I/O error occurred, 
              

                8=An unknown error occurred, 
              

                16=Invalid distinguished name, 
              

                17=No common ciphers negotiated, 
              

                18=No certificate available, 
              

                19=Certificate validation failed, 
              

                20=Root certificate authority not supported, 
              

                21=Unsupported operation, 
              

                22=Invalid certificate signature, 
              

                23=SSL protocol violation, 
              

                24=Not authorized, 
              

                25=Self-signed certificate, 
              

                26=Invalid session state, 
              

                27=Handle creation failed, 
              

                28=No private key, 
              

                29=Untrusted Certificate Authority, 
              

                30=Certificate date invalid, 
              

                31=Invalid cipher suite, 
              

                32=Handshake abandoned by peer, 
              

                33=Cannot open key database, 
              

                34=Host certificate not yet valid, 
              

                35=Certificate parsing error, 
              

                36=Certificate is revoked, 
              

                37=LDAP server is inactive, 
              

                38=Unknown Certificate Authority, 
              

                39=Internal error on partner, 
              

                40=Unknown alert received, 
              

                41=Client authentication alert, 
              

                42=Incorrect key usage, 
              

                43=Server name not recognized, 
              

                44=Bad message length, 
              

                45=Cryptographic error detected, 
              

                46=Export restriction, 
              

                47=TLS extension mismatch, 
              

                48=No Negotiation, 
              

                49=GSKCMS Error, 
              

                50=Signature algorithm not in signature algorithm pairs list
              

          peeraddr
        

          tcpipservice
        

    Destination
      
      CSOO