Re: FTP SSL error

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

Hi Dave,

It's not physically possible to do SSL without certificates.  It's 
possible without any CLIENT-SIDE certificates, which may be what you 
meant... but the FTP server will always send you a server certificate 
(automatically, as part of the connection) which your side will have to 
validate against a CA certificate.

Error -23 means that the server certificate you received couldn't be 
validated against the CA certificate.  Possibly they are using 
certificates that they generated themselves, or that they got from a CA 
that you don't have installed (like GoDaddy, for example.)

The solution to that problem is to install the appropriate CA certificate.

As for the "unable to connect" error... I don't have any input on that, 
other than the obvious...  Either the server is down, or a firewall is 
blocking you.


On 1/18/2011 1:43 PM, daparnin@xxxxxxxxxxxxxx wrote:
> I need to connect to a vendor's FTP site to do a file transfer from our i.
>   We are at V5R4.  It has to be a secure transfer and they have given us
> the options of SFTP or FTPs.  I'm trying FTPs by doing:
>
> FTP RMTSYS('ftp.vendor.com') PORT(6990) SECCNN(*SSL)
>
> When I tried it the first time I got a -23 error.  The help text indicated
> that this was a certificate problem.  We are using a user-id and password
> with no certificate.  When I try now I'm just getting "Cannot connect to
> host" "try agin later".  For what it's worth, I can get connected from my
> PC using Filezilla.
>
> I've read a few entries in the archives but didn't get any good ideas
> other than finding that FTP with SSL is basically FTPs.  At least that's
> my understanding.  Any ideas would be appreciated.
>
> Dave Parnin