Re: FTPs from IBMi.. to FTP server with a "untrusted certificate"

John,

When I put it together I did it on V5R4 and V7R1 (I think.. it could have
been V6R1). I tried to put both versions of the screens there for DCM (if
that's what you're referring to).

If they updated them again, I can certainly update my site but those are
really small points as to the resource it is and can be worked around,
hopefully.

Brad
www.bvstools.com

On Fri, Dec 12, 2014 at 11:15 AM, Jon Paris <jon.paris@xxxxxxxxxxxxxx>
wrote:

Thanks Brad - wish I’d known about that resource two years ago.

Just one point - a lot of those screens look to be out of date - you can
probably work out what’s needed but they don’t look much like the ones I
see now.


Jon Paris

www.partner400.com
www.SystemiDeveloper.com

On Dec 12, 2014, at 12:01 PM, Bradley Stone <bvstone@xxxxxxxxx> wrote:

You'll need to install the FTP Server's Certificate Authorities (CAs) in
your *SYSTEM store. This is so your IBM i will "trust" the server it
connects to.

I've put together documentation for this:
http://docs.bvstools.com/home/ssl-documentation

You'll want to start by getting the actual certificate (maybe with

OpenSSL

unless you can get it through a web browser). Then export the CAs and
finally import them into your *SYSTEM store.

Each step is outlined on the site.

Feel free to contact me for any help offline as well.

Brad
www.bvstools.com

On Fri, Dec 12, 2014 at 10:58 AM, Gqcy <gmufasa01@xxxxxxxxx> wrote:

I am trying to get going with a FTPs (FTP with Explicit SSL)

I have already set up one provider years ago (COVISINT), but am now
attempting to go live with Liaison...

when I attempt to connect from the IBMi, I get "Error -23. Certificate

is

not signed by a trusted certificate authority"

and am stopped...

The support people want me to use a tool like FileZilla, so I can
"click ok" and trust the cert. but I don't think the FTP client on the i
supports that!

I seem to recall, back when we set up COVISINT, I had to hunt down the
cert. my self, but can't remember how I did it.

I have some cert details, but don't know how to grab the actual .cer

file

needed to push to the IBMi cert. manager...

does anyone have any ideas for me?


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.