Re: Re: IBM Navigator for i web site - certificate errors

Need to ask the community a question. The Navigator interface has been
shipping a self signed certificate for over a decade now and when you
connect you are using SSL for the Navigator interface. For years this has
worked 'OK'. Today, with the clamp down by nearly all browsers, this
certificate is causing a great deal of problems and from what I can see in
many respects is making the Navigator un usable. One of the options we
are considering is to revert the Navigator to NON-SSL (likely on port
2004) by default. We have a wizard already in the Web Admin GUI that will
easily allow you the user to re-configure Navigator to use SSL again but
now use your own certificate.

Thoughts ?

Thanks Tim

Tim Rowe, [1]timmr@xxxxxxxxxx
Business Architect Application Development & Systems Management for IBM i
IBM i Development Lab, Rochester, MN
(507) 253-6191 (Tie) 553-6191

[2]http://www-03.ibm.com/systems/power/software/i/are/index.html

<midrange-l-bounces@xxxxxxxxxxxx>
message: 4
date: Mon, 18 Jul 2016 07:50:59 -0400
from: Rob Berendt <[3]rob@xxxxxxxxx>
subject: Re: IBM Navigator for i web site - certificate errors

First think I noticed was:
Running v7.1, cume 4283
That '4' in 4283 indicates to me that it hasn't had a cume installed since
2014.
You should be on 6120, according to
[4]http://www-912.ibm.com/s_dir/sline003.nsf/2d3aff1c6b4d6ce086256453000d971e/c69211d3133949f886257c1c00513742?OpenDocument

See if WRKPTFGRP matches this:
[5]http://www-912.ibm.com/s_dir/sline003.nsf/GroupPTFs?OpenView&view=GroupPTFs

Browsers are getting downright picky about
- Expired or bad certificates
- Old SSL encryption. This one they are really going full court press on.

It's broke, fix it.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
[6]http://www.dekko.com

From: Charles Wilt <[7]charles.wilt@xxxxxxxxx>
To: Midrange Systems Technical Discussion <[8]midrange-l@xxxxxxxxxxxx>
Date: 07/12/2016 10:36 AM
Subject: IBM Navigator for i web site - certificate errors
Sent by: "MIDRANGE-L" <[9]midrange-l-bounces@xxxxxxxxxxxx>

So apparently I missed a memo somewhere...

Trying to use the server based Navigator for i web site and it won't come
up in Chrome or FF.

Chrome gives:
This site can?t be reached

*myibmi.mycompany.private* unexpectedly closed the connection.

FF gives:
Secure Connection Failed
The connection to myibmi.mycompany.private:2005 was interrupted while the
page was loading.

An old version of IE works but gives me a certificate error
Certificate invalid
This CA Root certificate is not trusted.
Issued to: [10]www.ibm.com

note that I'm not given an option to export or install the cert.

Running v7.1, cume 4283

I know a lot of SSL related pieces have been depreciated recently.

What do I need to redo to get Navigator for i to work with Chrome & FF
again?

Thanks!
Charles
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: [11]MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: [12]http://lists.midrange.com/mailman/listinfo/midrange-l
or email: [13]MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at [14]http://archive.midrange.com/midrange-l.

Please contact [15]support@xxxxxxxxxxxx for any subscription related
questions.

------------------------------

Subject: Digest Footer

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) digest list
To post a message email: [16]MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: [17]http://lists.midrange.com/mailman/listinfo/midrange-l
or email: [18]MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at [19]http://archive.midrange.com/midrange-l.

Please contact [20]support@xxxxxxxxxxxx for any subscription related
questions.

------------------------------

End of MIDRANGE-L Digest, Vol 15, Issue 1136
********************************************

</midrange-l-bounces@xxxxxxxxxxxx>

References

Visible links
1. mailto:timmr@xxxxxxxxxx
2. http://www-03.ibm.com/systems/power/software/i/are/index.html
3. mailto:rob@xxxxxxxxx
4. http://www-912.ibm.com/s_dir/sline003.nsf/2d3aff1c6b4d6ce086256453000d971e/c69211d3133949f886257c1c00513742?OpenDocument
5. http://www-912.ibm.com/s_dir/sline003.nsf/GroupPTFs?OpenView&view=GroupPTFs
6. http://www.dekko.com/
7. mailto:charles.wilt@xxxxxxxxx
8. mailto:midrange-l@xxxxxxxxxxxx
9. mailto:midrange-l-bounces@xxxxxxxxxxxx
10. http://www.ibm.com/
11. mailto:MIDRANGE-L@xxxxxxxxxxxx
12. http://lists.midrange.com/mailman/listinfo/midrange-l
13. mailto:MIDRANGE-L-request@xxxxxxxxxxxx
14. http://archive.midrange.com/midrange-l
15. mailto:support@xxxxxxxxxxxx
16. mailto:MIDRANGE-L@xxxxxxxxxxxx
17. http://lists.midrange.com/mailman/listinfo/midrange-l
18. mailto:MIDRANGE-L-request@xxxxxxxxxxxx
19. http://archive.midrange.com/midrange-l
20. mailto:support@xxxxxxxxxxxx