Hi Chris,
Yeah, i know how SSL works. The entry also described on how to import a
CA. The problems I had were twofold:
a) I wasn't able to import an OpenSSL CA certificate into DCM. I didn't
investigate this closely. I was able to import the CA of another i5/OS
instance.
b) I was unable to disable the certificate check of the client - the
client always verified the SSL certificate.
And I never used client-side certificates, they're just too much work.
Oh, and thanks! :)
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Chris Bipes
Sent: Tuesday, July 31, 2007 10:04 PM
To: Midrange Systems Technical Discussion
Subject: RE: Secure FTP
Your problem is the self signed CA. You need to get the FTP server to
import the CA certificate before it will trust any certificates issued
from the CA.
Love your blog by the way. Very informative.
Chris Bipes
Director of Information Services
CrossCheck, Inc.
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Lukas Beeler
Sent: Tuesday, July 31, 2007 12:55 PM
To: Midrange Systems Technical Discussion
Subject: RE: Secure FTP
It can be server and client, if we're talking about FTP/SSL, FTP/TLS.
sftp (the SSH thing) also works, but requires PASE.
The problem with acting as an FTP/SSL/TLS client are certificates, and
their acceptance.
I've played with this a while back and blogged about it:
http://projectdream.org/wordpress/2007/03/08/using-the-i5os-ftp-client-w
ith-self-signed-certificates-doesnt-work/
midrange.com
