XTR: Client connection error "XYSSL: No ciphers in common"
The TLS cipher suite config can vary by Windows version.
The following cipher suite needs to be enabled
TLS_RSA_WITH_AES_256_CBC_SHA256 << Matches cipher suite 61 in HE and TR CONF.
To check the installed cipher suites use the following Windows PowerShell command.
Get-TlsCipherSuite | Format-Table Name
Fix: Enable cipher TLS_RSA_WITH_AES_256_CBC_SHA256
Example:
Use iiscrypto and check CIPHERS enabled on both severs and apply required CIPHERS on Windows 2016 Server.
If you are unable to locate the solution needed or if you need additional assistance please Click Here to open a case from our Customer Care Portal.
Related Articles
XYGATE: "XTR Error: SSL: InitializeSecurityContext error: Illegal message"
This error happens when the windows client running the XYGATE GUI and NonStop do not have a common cipher suite enabled. A cipher suite that is enabled in the TRCONF file must also be enabled on the client to connect the GUI successfully to the ...
XTR: XYGATETR command socket read error: 4106
This error happens when a non-XTR application attempts to connect to an XTR port. An EMS message with command socket read error: 4106 will show. If you are unable to locate the solution needed or if you need additional assistance, please Click Here ...
XTR - Error "XYPRO Product:XYCERT Msg#:15 Level:Warning Msg:Cert/cacert check error: -33" when running XYCERT
Ensure that the correct CA certificate is specified as the Issuer Common Name in the files specified with the "-cert" and "-cacert" flags when running XYCERT XYCERT requires that the CA certificates to be in separate files. Multiple CA certificates ...
XTR: Error encountered when running XTR_SYNTAX_CHECK
Was there a recent XTR install or upgrade? The XTR_FINISH_INSTALL macro may not have been run on completion of the install/upgrade. 1. RUN $<vol>.XYGATETR.XTR INSTALL ($<vol> is the disk volume where XTR is installed) 2. XTR_FINISH_INSTALL If you are ...
Steps to Fully Setup XTR With HPE SSL
1. Setup HPESSL When prompted by the SETUP macro, select a listening port and enter it and your XTR port as the target port. For details on running the SETUP macro, see "To install a HPE NonStop SSL PROXYS process for RSC" (beginning on step 3, run ...