RE: Re: Telnet 5250 with SSL Support -- LINUX5250

I will have 5.1 here in two weeks if all goes well. It will also be on the
development machine.

I remember an option on 4.5 when setting up http ssl server which required
client certificate, maybe only the http server supported that, but I think
not.

I am still a novice programmer, if it would be possible please send me a
copy of the whole patched binary if you don't mind.


Later

__________________________________


On Tue, 30 Oct 2001, Ernst Bekker wrote:
>
> I'll help test. I've only set up server side ssl for an http server, so
just
> say what I should do :)
>

Here's the problem:

In V5R1, a new feature was added to the OS/400 telnet server that allows
you to "require client authentication"

You can find information about that here:
http://publib.boulder.ibm.com/html/as400/v5r1/ic2924/info/rzain/rzainrzainte
lntpi.htm#HDRRZAINTELNTPI

I'm running V4R5, and my release supports SSL connections, but does not
have the "require client authentication" option...

So, what I was planning to do is do some research and see if I can
determine what is necessary to do client authentication in TN5250, and
then get someone who is running V5R1 to test my work.

First of all, have you tried the existing SSL support in TN5250?  You
should make sure that that will work before we take it to the next
level... :)

Next, are you running V5R1?  If so, would you be able to turn on the
"require client authentication" option on your AS/400?  Or would that
disrupt your business activities?

Let me know the status of these things, and when I've got a patch for
TN5250 that enables client support, I'll send it to you to test...

Thanks!


_______________________________________________
This is the Linux 5250 Development Project (LINUX5250) mailing list
To post a message email: LINUX5250@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/linux5250
or email: LINUX5250-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/linux5250.

Confidentiality Caution and Disclaimer

This message and/or any attachment thereto ("the message")
contains privileged and confidential information intended
only for the recipient named above.
If you are not the intended recipient of this message,
please erase it permanently once you have notified the
sender, per return e-mail, that you have received the
message in error.
Unless the sender is duly authorised by either the Telesure
Group, or any of its subsidiary companies or I.S Services
("the Group") to send this message and unless the content
of this message is also duly authorised by the Group, any
views expressed in this message are those of the individual
sender and the Group will not accept liability therefore,
nor for any consequential damage arising therefrom.
Any recipient of an unacceptable communication, a chain
letter or offensive material of any nature is requested
to report it to postmaster@isservices.co.za.