HTTPSTK: Error 10091 enabling SSL services - SSL Disabled.

(Last modified: 17Apr2003)

This document (10082078) is provided subject to the disclaimer at the end of this document.

fact

NetWare 5.1

NetWare 6.0

symptom

HTTPSTK: Error 10091 enabling SSL services - SSL Disabled.

Cannot installing iPrint printers over a secure connection

Winsock Error 10061 - The Remote Party has Refused your Connection

Unknown error: make_secure_socket: for address x.x.x.x port 2200, WSAIoctl: (SO_SSL_SET_SERVER)

Failure to listen on secure ports.

RCONAG6 returns error SAS_Register Failed.

Cannot get into PORTAL securely.

cause

There is a race condition between SAS.NLM and NILE.NLM. SAS fails to initialize due to NILE not being able to log in to NDS. SAS never tries to reinitialize. The causes all SSL-based applications to fail.

fix

Apply SAS.NLM version 1.72 or later. This can be found in patch SAS172FT.EXE.  The fix will also be rolled into NW6SP4 and NW51SP7.   This patch has SAS retry for 20 seconds before giving up.  This being the case, NILE needs to load somewhere in the AUTOEXEC.NCF before SAS does. If you have not changed the default load order, no change is necessary. The default is shown below:

Load NILE.NLM
Load HTTPSTK.NLM /SSL /keyfile:"SSL CertificateIP"
Load PORTAL.NLM
LOAD NDSIMON.NLM
LOAD NICISDI.XLM s
LOAD SASDFM.XLM
LOAD SAS.NLM
LOAD PKI.NLM

You must have at least NICI version 2.0.2 to apply this patch.

There are also some workarounds you can use if you don't want to apply a BETA patch. You can change the load order of the modules in your autoexec.ncf as shown below. Sometimes additional delays are needed.

LOAD NICISDI.XLM s
LOAD SASDFM.XLM
LOAD SAS.NLM
LOAD PKI.NLM
LOAD NILE.NLM
LOAD HTTPSTK.NLM /SSL /keyfile:"SSL CertificateIP"
LOAD PORTAL.NLM

document

Document Title:	HTTPSTK: Error 10091 enabling SSL services - SSL Disabled.
Document ID:	10082078
Solution ID:	NOVL88493
Creation Date:	11Apr2003
Modified Date:	17Apr2003
Novell Product Class:	NetWare Security Components

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.