Tuesday, 27 August 2013

TLS Schannel Errors

Had an issue the other day and it took me awhile to find out what the TLS Schannel error codes meant.

The exact error message I was receiving was:


After doing some "googling" I was able to find a nice list of the Schannel error message:

Error Code
Description
0
CLOSE NOTIFY
10
UNEXPECTED MESSAGE
20
BAD RECORD MAC
21
DECRYPTION FAILED
22
RECORD OVERFLOW
30
DECOMPRESSION FAIL
40
HANDSHAKE FAILURE
42
BAD CERTIFICATE
43
UNSUPPORTED CERT
44
CERTIFICATE REVOKED
45
CERTIFICATE EXPIRED
46
CERTIFICATE UNKNOWN
47
ILLEGAL PARAMETER
48
UNKNOWN CA
49
ACCESS DENIED
50
DECODE ERROR
51
DECRYPT ERROR
60
EXPORT RESTRICTION
70
PROTOCOL VERSION
71
INSUFFIENT SECURITY
80
INTERNAL ERROR
90
USER CANCELED
100
NO RENEGOTIATION
110
UNSUPPORTED EXT



From the error message i was receiving in the Windows System Event Viewer we can see that the error code was/is "42" which relates to a "BAD CERTIFICATE"

From here I re-generated the certificate on the Lync gateway, and restarted the Lync SBA that was associated with the trunk and the Schannel error and related mediation Server errors cleared.

Reference Link:
http://msdn.microsoft.com/en-us/library/windows/desktop/dd721886(v=vs.85).aspx

No comments:

Post a Comment