RE: [LINUX5250] SSL Client Certs Added

["Sean Porterfield" <sporter@xxxxxxxxxxxx>]

Scott,

Did you test with a client cert but without the client cert required on the
AS/400?  When I tried mine, it did nothing.  I used the "verify CA" and it
worked fine.  Just when I added the client cert parameter did it fail.

On another note, I had to follow your directions for creating a client cert
even though I had already created one previously...  I couldn't figure out
how to get my other one off the AS/400!  (I have it installed on MSIE at
work, but that didn't seem to be a compatible format.)  No big deal really.

I can't turn on the "require certificate" on the AS/400 yet because I have
too many real users who don't have client certs.  I couldn't get DCM to
create a cert except for the user who is signed on, and I don't want all of
my users using DCM!  (<sarcasm>Thanks IBM</sarcasm>)

>-----Original Message-----
>From: Scott Klement

>Due to requests on this list, I've added SSL certificate capabilities for
>client authentication into the emulator.
>
>This new capability is now in CVS for both the 0.17 branch and the 0.16
>branch.   And instructions for using it are in the README.ssl file which
>is part of the distribution.
>
>Please test this capability, and provide feedback!  It works for me, I
>just want to make sure that it works for you!