RE: Re: Telnet 5250 with SSL Support

I'll help test. I've only set up server side ssl for an http server, so just
say what I should do :)

_____________________________________--


I added SSL support into tn5250 on Sept 25, 2001.  I have not made a new
release of tn5250 since that time, so the only way to get this version
is via CVS.

It does not yet support client-side certificates, though I'm willing to
try to implement this if someone is willing to help me test it.

It does support an additional "trusted CA" certificate, if that's the
type of cert that you are downloading -- which means that it has the same
level of SSL support that RUMBA 7.0 has, and more SSL support than
Mochasoft has.   I do not have Client Access, so I cannot compare them.

To get TN5250 from CVS to try out SSL support, type this:

cvs -d:pserver:anonymous@cvs.tn5250.sourceforge.net:/cvsroot/tn5250 login

It will ask you for a password -- you don't need to type one, just hit ENTER

Then type:

cvs -z3 -d:pserver:anonymous@cvs.tn5250.sourceforge.net:/cvsroot/tn5250 \
co -r b0-16 tn5250

It will download the source code.

Then type:

cd tn5250
./autogen.sh
./configure --with-ssl
make
make install

Once everything is installed, try connecting to your AS/400 by typing:

tn5250 ssl:as400.example.com

Let me know if that works for you.   The more people who tell me that this
SSL support works, the more likely I am to actually make a release :)


On Mon, 29 Oct 2001, Luis Astray wrote:

> Thank you.
> I'll try to explain my problem in a better way.
>
> Take in account that I'm a spanish speeker and my english is not like I
> wish.
>
> Problem:
> I would like to use linux as a 5250 client insted of Windows.
> With tn5250 and a connection to a unsecure port on an IBM AS/400 all
worked
> fine for me.
> But...
> The company that I work to has desided to use port 992 insted of telnet
> unsecure port. That requieres me to use client access express with SSL
> support.
> To use SSL support over client access express I'have to download from the
> AS/400 server a certificate than enables me to use port 992.
>
> The questions are ...
> Is there any way to use tn5250 the same way I use client access express
with
> ssl support?
> If the way exists... How can I tell tn5250 to use the certificate I've
> downloaded.
>
>
> Excuse me for my bad english.
>
> I'm an expirenced user of AS/400 since it appears.
> I work with other database sistems ussing GeneXus. (Oracle, DB2/UDB
(RS6000)
> etc).
> My expirence with databases design is quite large, but my communications
> skills are quite short as my english.
>
> I will be pleasent to bring up some of my expierence to the forum
>
> Thanks for the answer.
>
> Luis Astray
>
>
>
> ----- Original Message -----
> From: "Scott Klement" <klemscot@klements.com>
> To: <linux5250@midrange.com>
> Sent: Monday, October 29, 2001 1:35 PM
> Subject: [LINUX5250] Re: Telnet 5250 with SSL Support
>
>
> >
> > I'm sorry, but I really don't understand your question.
> >
> > Are you using TN5250 with SSL support over a PPP channel?
> >
> > Or is your PPP somehow using SSL directly?
> >
> >
> > Let me explain:
> >
> > The SSL that is part of the TN5250 emulator runs on top of TCP.  It
takes
> > the TCP data and encrypts it, then sends it over a normal TCP session.
> > The TCP protocol is a clean 8-bit data channel.  This means that ANY
byte
> > values can be sent over a TCP channel -- it does not matter what they
are
> > -- they'll get received at the other end unchanged.
> >
> > Consequently, it should not matter whether the data being sent over your
> > PPP session is SSL encrypted or not.   In either case, it's just a
string
> > of bytes.
> >
> > But -- if you're trying to run a PPP over SSL session, that is instead
> > of using a modem to run PPP over, you're actually trying to send your
> > PPP data over an SSL connection -- thus an encrypted PPPoE scenario --
> > then this is a different matter, your PPP software may not understand
> > how to use an SSL channel in this way -- but of course, this has NOTHING
> > to do with the TN5250 project.
> >
> > The only other possibility that I can think of is that when you
installed
> > OpenSSL (you are using OpenSSL, right?) that it conflicts somehow with
> > your PPP software.   Maybe they have shared libraries with the same
name?
> >
> > At any rate, your problem does not make sense to me.   You'll have to
> > provide more information.
> >
> > Provide step-by-step instructions telling me how to reproduce the
problem,
> > including the exact names & versions of the software packages you're
> > installing...    Also, please give the text of the error messages that
> > you're seeing, including whatever is on the screen before the error.
> > If possible, use script(1) to record the details exactly as they are.
> >
> >
> > On Sun, 28 Oct 2001, Luis Astray wrote:
> >
> > > I' have installed SuSE Linux 7.0.
> > > I've added ssl support over ppp.
> > > This action causes my ppp connection to end with errors.
> > >
> > > Then I've  uninstalled ssl support, and my ppp connection now works
> fine.
> > >
> > > I have another computer with W98 SE installed and Client access
> > > express with ssl support. With this computer I'm ussualy connecting to
> > > a coupple of AS/400 servers succefully.
> > >
> > > My question.
> > >
> > > How can I use the same support as it brings Client access express
> > > using my linux computer.
> > >
> > > Thank's for the answers.
> > >


_______________________________________________
This is the Linux 5250 Development Project (LINUX5250) mailing list
To post a message email: LINUX5250@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/linux5250
or email: LINUX5250-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/linux5250.

Confidentiality Caution and Disclaimer

This message and/or any attachment thereto ("the message")
contains privileged and confidential information intended
only for the recipient named above.
If you are not the intended recipient of this message,
please erase it permanently once you have notified the
sender, per return e-mail, that you have received the
message in error.
Unless the sender is duly authorised by either the Telesure
Group, or any of its subsidiary companies or I.S Services
("the Group") to send this message and unless the content
of this message is also duly authorised by the Group, any
views expressed in this message are those of the individual
sender and the Group will not accept liability therefore,
nor for any consequential damage arising therefrom.
Any recipient of an unacceptable communication, a chain
letter or offensive material of any nature is requested
to report it to postmaster@isservices.co.za.