Problem

When issuing a transfer request (Gateway as initiator) using an SSL- or TLS-secured protocol (such as FTPS or HTTPS), the connection fails, and the following error appears in the Gateway log:

handshake aborted, error 12/208

Resolution

This occurs when the remote server is configured to allow certificate-based authentication, and its list of Distinguished Names (DNs) of its trusted certificates exceeds 16KB in length. In that case the list is fragmented across two or more SSL messages, and Gateway does not reassemble them correctly.

The workaround is to remove unneeded trusted certificates from the remote server's certificate store, to get the list below 16KB.