RE: Re: Telnet 5250 with SSL Support

On Tue, 30 Oct 2001, Ernst Bekker wrote:
>
> I'll help test. I've only set up server side ssl for an http server, so just
> say what I should do :)
>

Here's the problem:

In V5R1, a new feature was added to the OS/400 telnet server that allows
you to "require client authentication"

You can find information about that here:
http://publib.boulder.ibm.com/html/as400/v5r1/ic2924/info/rzain/rzainrzaintelntpi.htm#HDRRZAINTELNTPI

I'm running V4R5, and my release supports SSL connections, but does not
have the "require client authentication" option...

So, what I was planning to do is do some research and see if I can
determine what is necessary to do client authentication in TN5250, and
then get someone who is running V5R1 to test my work.

First of all, have you tried the existing SSL support in TN5250?  You
should make sure that that will work before we take it to the next
level... :)

Next, are you running V5R1?  If so, would you be able to turn on the
"require client authentication" option on your AS/400?  Or would that
disrupt your business activities?

Let me know the status of these things, and when I've got a patch for
TN5250 that enables client support, I'll send it to you to test...

Thanks!