KB Article #177990

SSL Handshake is completed, then, the connection fails.

Problem

SSL Handshake is completed, then, the connection fails


Requester side errors:

CFTH13E FPDU Remote reject <PART=MyPart DIAGI=730 DIAGP=RCO 399>

CFTT75E connect reject <IDTU=Z0000ZBT PART=MyPart IDM=MyIDM IDT=F0714363 730 RCO 399>


Server side errors:

CFTT48E Server session rejected <PART=MyPart SSL=MyPartSSL reason=VERIFY>

CFTH22E NPART=MyPart rejected DIAGI=260



Resolution

The main issue is highlighted in the message CFTT48E where the reason is VERIFY


There is a conflict concerning the VERIFY parameter on the server.


The VERIFY parameter in CFTSSL attached to the CFTPROT is set to OPTIONAL while it is set to REQUIRED in the CFTSSL server attached to the CFTPART.


If the VERIFY is set to OPTIONAL in the CFTSSL attached to the CFTPROT, it cannot be other than OPTIONAL or NONE in CFTSSL server. (and definitely not set to REQUIRED).