Re: Re: Telnet 5250 with SSL Support

Thank you.
I'll try to explain my problem in a better way.

Take in account that I'm a spanish speeker and my english is not like I
wish.

Problem:
I would like to use linux as a 5250 client insted of Windows.
With tn5250 and a connection to a unsecure port on an IBM AS/400 all worked
fine for me.
But...
The company that I work to has desided to use port 992 insted of telnet
unsecure port. That requieres me to use client access express with SSL
support.
To use SSL support over client access express I'have to download from the
AS/400 server a certificate than enables me to use port 992.

The questions are ...
Is there any way to use tn5250 the same way I use client access express with
ssl support?
If the way exists... How can I tell tn5250 to use the certificate I've
downloaded.


Excuse me for my bad english.

I'm an expirenced user of AS/400 since it appears.
I work with other database sistems ussing GeneXus. (Oracle, DB2/UDB (RS6000)
etc).
My expirence with databases design is quite large, but my communications
skills are quite short as my english.

I will be pleasent to bring up some of my expierence to the forum

Thanks for the answer.

Luis Astray



----- Original Message -----
From: "Scott Klement" <klemscot@klements.com>
To: <linux5250@midrange.com>
Sent: Monday, October 29, 2001 1:35 PM
Subject: [LINUX5250] Re: Telnet 5250 with SSL Support


>
> I'm sorry, but I really don't understand your question.
>
> Are you using TN5250 with SSL support over a PPP channel?
>
> Or is your PPP somehow using SSL directly?
>
>
> Let me explain:
>
> The SSL that is part of the TN5250 emulator runs on top of TCP.  It takes
> the TCP data and encrypts it, then sends it over a normal TCP session.
> The TCP protocol is a clean 8-bit data channel.  This means that ANY byte
> values can be sent over a TCP channel -- it does not matter what they are
> -- they'll get received at the other end unchanged.
>
> Consequently, it should not matter whether the data being sent over your
> PPP session is SSL encrypted or not.   In either case, it's just a string
> of bytes.
>
> But -- if you're trying to run a PPP over SSL session, that is instead
> of using a modem to run PPP over, you're actually trying to send your
> PPP data over an SSL connection -- thus an encrypted PPPoE scenario --
> then this is a different matter, your PPP software may not understand
> how to use an SSL channel in this way -- but of course, this has NOTHING
> to do with the TN5250 project.
>
> The only other possibility that I can think of is that when you installed
> OpenSSL (you are using OpenSSL, right?) that it conflicts somehow with
> your PPP software.   Maybe they have shared libraries with the same name?
>
> At any rate, your problem does not make sense to me.   You'll have to
> provide more information.
>
> Provide step-by-step instructions telling me how to reproduce the problem,
> including the exact names & versions of the software packages you're
> installing...    Also, please give the text of the error messages that
> you're seeing, including whatever is on the screen before the error.
> If possible, use script(1) to record the details exactly as they are.
>
>
> On Sun, 28 Oct 2001, Luis Astray wrote:
>
> > I' have installed SuSE Linux 7.0.
> > I've added ssl support over ppp.
> > This action causes my ppp connection to end with errors.
> >
> > Then I've  uninstalled ssl support, and my ppp connection now works
fine.
> >
> > I have another computer with W98 SE installed and Client access
> > express with ssl support. With this computer I'm ussualy connecting to
> > a coupple of AS/400 servers succefully.
> >
> > My question.
> >
> > How can I use the same support as it brings Client access express
> > using my linux computer.
> >
> > Thank's for the answers.
> >
>
> _______________________________________________
> This is the Linux 5250 Development Project (LINUX5250) mailing list
> To post a message email: LINUX5250@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/linux5250
> or email: LINUX5250-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/linux5250.
>