RE: [LINUX5250] Re: Telnet 5250 with SSL Support

["Sean Porterfield" <sporter@xxxxxxxxxxxx>]

Actually, there is a PTF that enables it all the way back to V4R4M0.  I had
trouble with my Telnet-SSL until I remembered I had turned it on!

http://www-1.ibm.com/servers/eserver/iseries/tcpip/telnet/ssl.htm

V4R4 5769-SS1 - PTF SF61406 V4R5 5769-SS1 - PTF SF61427

To enable (lock out users without client certificate): CALL PGM(QSYS/QTVSRV)
PARM(*SSLCERT)
To disable (allow users without client certificate): CALL PGM(QSYS/QTVSRV)
PARM(*NOSSLCERT)

I'd love to help test, but it will be a bit tricky to coordinate since I
have real users currently using Client Access over the Internet with SSL.
(Sadly, Client Access does not seem to support client certificates.  At
least it didn't work for me...)

We are at V4R4, planning to go to V5R1 RSN.

>-----Original Message-----
>From: Scott Klement
>Sent: Tuesday, October 30, 2001 2:46 AM

>On Tue, 30 Oct 2001, Ernst Bekker wrote:
>>
>> I'll help test. I've only set up server side ssl for an http
>server, so just
>> say what I should do :)
>>
>
>Here's the problem:
>
>In V5R1, a new feature was added to the OS/400 telnet server that allows
>you to "require client authentication"
>
>You can find information about that here:
>http://publib.boulder.ibm.com/html/as400/v5r1/ic2924/info/rzain/rza
>inrzaintelntpi.htm#HDRRZAINTELNTPI
>
>I'm running V4R5, and my release supports SSL connections, but does not
>have the "require client authentication" option...
>
>So, what I was planning to do is do some research and see if I can
>determine what is necessary to do client authentication in TN5250, and
>then get someone who is running V5R1 to test my work.
>
>First of all, have you tried the existing SSL support in TN5250?  You
>should make sure that that will work before we take it to the next
>level... :)
>
>Next, are you running V5R1?  If so, would you be able to turn on the
>"require client authentication" option on your AS/400?  Or would that
>disrupt your business activities?
>
>Let me know the status of these things, and when I've got a patch for
>TN5250 that enables client support, I'll send it to you to test...
>
>Thanks!