KB Article #178157
Invalid CONNECT FPDU < Invalid length 93 for PI 99 into FPDU CONNECT >
Problem
Client log:
16/09/29 10:44:00 CFTY14I CTX=21000b PART=ODZUSIV_OUSIV_SSL SSL=SSLPRTC2 client session established CIPHER=47 AUTH=SERVER
16/09/29 10:44:00 CFTY02Z >> CTX=21000b PDataRq() _ SENDING 53 APPLICATION DATA
16/09/29 10:44:00 CFTY02Z >> CTX=21000b NDataI() _ 37 APPLICATION DATA RECEIVED FROM NETWORK
16/09/29 10:44:00 CFTY02Z >> CTX=21000b PDataRq() _ SENDING 165 APPLICATION DATA
16/09/29 10:44:00 CFTY02Z >> CTX=21000b NDataI() _ 37 APPLICATION DATA RECEIVED FROM NETWORK
16/09/29 10:44:00 CFTH13E PART=ODZUSIV_ FPDU Remote reject DIAGI=720 DIAGP=RCO 318
16/09/29 10:44:00 CFTT75E PART=ODZUSIV_ IDM=TEST IDT=I2910172 connect reject 720 RCO 318
16/09/29 10:44:00 CFTY11I CTX=21000b PART=ODZUSIV_OUSIV_SSL SSL=SSLPRTC2 Closing client SSL session
Server log:
16/09/29 10:44:00 CFTY20I PROT=PROTSSL0 SSL=SSLPRTS0 opening server session CTX=260b81 on task PID=19203
16/09/29 10:44:00 CFTY25I CTX=260b81 remote address HOST=172.21.2.67
16/09/29 10:44:00 CFTY24I CTX=260b81 Server certificate ID=CFTRECSO ROOTID=SNCFSO
16/09/29 10:44:00 CFTY15I CTX=260b81 PROT=PROTSSL0 SSL=SSLPRTS0 server session established CIPHER=47 AUTH=SERVER
16/09/29 10:44:00 CFTY02Z >> CTX=260b81 NDataI() _ 53 APPLICATION DATA RECEIVED FROM NETWORK
16/09/29 10:44:00 CFTY02Z >> CTX=260b81 NDataI() _ 165 APPLICATION DATA RECEIVED FROM NETWORK
16/09/29 10:44:00 CFTH20E Invalid CONNECT FPDU < Invalid length 93 for PI 99 into FPDU CONNECT >
16/09/29 10:44:00 CFTY12I CTX=260b81 PROT=PROTSSL0 SSL=SSLPRTS0 Closing server SSL session
The send in the direction server - client, works, but the other way it doesn't.
Resolution
Use PESIT E. Modify the protocol definition in PROF='ANY'.
Explanation:
While when PROF=CFT, PI length are strictly controlled in regards of the older PeSIT implementation.
When the PROF is set to ANY (PeSIT E but also automatic adjustment when server) it always manage Pi details for the PeSIT E when requester, and it is not compatible with a server set to PROF=CFT.