× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



John,

That means your system doesn't trust the "certificate authority" that
signed the SSL certificate.

I don't believe there's a way to ignore that on IBM's FTP client, but
importing the CA(s) is fairly simple. Just retrieve the Certificate (or
CAs if you know how) and import them into your *SYSTEM store.

Retrieve the SSL certificate -
https://docs.bvstools.com/home/ssl-documentation/openssl
Exporting the CAs (skip the part about getting it from a website) -
https://docs.bvstools.com/home/ssl-documentation/exporting-certificate-authorities-cas-from-a-website
Importing into your *SYSTEM store -
https://docs.bvstools.com/home/ssl-documentation/importing-a-certificate-authority-ca


I'm happy to hepl with parts 1 and 2 if you want as well. Just shoot me an
email with the address of the FTP server. If it's available to the world
should be able to get it for you.

One issue, since you're on V7R1, is that the ciphers used in the SSL
certificate may not be supported by your OS level. Hopefully you have an
OS upgrade in the works.

Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #15 <https://www.bvstools.com/mailtool.html>: The ability
to add a Footer to each email sent using an IFS stream file.

On Thu, May 9, 2019 at 6:58 AM john art <jhon_art@xxxxxxxxxxx> wrote:

I'm trying to connect to an FTP server with this command:
FTP RMTSYS (FTP.SERVERXXX.IT) PORT (990), but I get this error
Connection protection error, return code -23.
SSL (Secure Sockets Layer) function SSL_Handshake return code -23
-23 The certificate is not signed by a valid certification authority.
can someone give me some tips on how to resolve the issue?
As400 with V7R1
Thanks in advance

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com


As an Amazon Associate we earn from qualifying purchases.

This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.