Re: FTP client with Digital Certificate

I dug out my notes from when I implemented this last year.  

Are you talking about a user certificate or a CA certificate?  The CA
certificate can be imported and applied to the FTP client.  Quoting the IBM
contact I had at the time "...user certificates are not usable by the FTP
client in OS/400 at this time".


Gord

>On Thu, 27 Oct 2005 12:51:57 -0700, "Eric Kempter" <EKempter@xxxxxxxxxxxxxxx> 
>wrote:

>Gord,
>
>     The FTP client supports SSL without a problem.  It's the digital 
> certificate that is the problem.  Apparently the digital certificate only 
> works on the ftp server (for incoming ftp), not the ftp client (for outgoing 
> ftp).  Why would IBM implement digital certificates and not include the ftp 
> client?  Windows does it, UNIX does it. ISeries doesn't?
>
> -----Original Message-----
>From:  midrange-l-bounces@xxxxxxxxxxxx 
>[mailto:midrange-l-bounces@xxxxxxxxxxxx]  On Behalf Of Gord Hutchinson
>Sent:  Thursday, October 27, 2005 12:01 PM
>To:    Midrange Systems Technical Discussion
>Subject:       Re: FTP client with Digital Certificate
>
>Maybe I'm misunderstanding something but I am doing secure FTP using the
>as/400 FTP client.  Other than the certificates, the only thing I'm doing
>different than normal FTP is using port 990.
>
>
>Gord
>
>>On Wed, 26 Oct 2005 10:15:31 -0700, "Eric Kempter" <EKempter@xxxxxxxxxxxxxxx> 
>>wrote:
>
>>IBM has stated that the ftp client does not support digital certificates.  
>>I'm hoping that someone on the list can prove them wrong.
>>
>> -----Original Message-----
>>From:         midrange-l-bounces@xxxxxxxxxxxx 
>>[mailto:midrange-l-bounces@xxxxxxxxxxxx]  On Behalf Of Eric Kempter
>>Sent: Wednesday, October 26, 2005 9:23 AM
>>To:   Midrange Systems Technical Discussion
>>Subject:      RE: FTP client with Digital Certificate
>>
>>Most definitely.  IBM has verified that our set up is correct.
>>
>> -----Original Message-----
>>From:         midrange-l-bounces@xxxxxxxxxxxx 
>>[mailto:midrange-l-bounces@xxxxxxxxxxxx]  On Behalf Of Chris Bipes
>>Sent: Wednesday, October 26, 2005 8:39 AM
>>To:   Midrange Systems Technical Discussion
>>Subject:      RE: FTP client with Digital Certificate
>>
>>Did you import the client certificate in to your server? 
>>
>>
>>Chris Bipes
>>Information Services Director
>>CrossCheck, Inc.
>>
>>-----Original Message-----
>>From: midrange-l-bounces@xxxxxxxxxxxx
>>[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Eric Kempter
>>Sent: Wednesday, October 26, 2005 8:26 AM
>>To: Midrange Systems Technical Discussion
>>Subject: RE: FTP client with Digital Certificate
>>
>>We keep trying but it isn't working - the certificate doesn't appear to
>>pass.  Has anyone set this up successfully?
>>
>>-- 
>>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>>To post a message email: MIDRANGE-L@xxxxxxxxxxxx
>>To subscribe, unsubscribe, or change list options,
>>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>>Before posting, please take a moment to review the archives
>>at http://archive.midrange.com/midrange-l.
>>
>>
>>
>>
>>-- 
>>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>>To post a message email: MIDRANGE-L@xxxxxxxxxxxx
>>To subscribe, unsubscribe, or change list options,
>>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>>Before posting, please take a moment to review the archives
>>at http://archive.midrange.com/midrange-l.
>
>-- 
>Gord Hutchinson
>Database Administrator, IT
>TST Overland Express
>ghutchinson@xxxxxxxxxxxxxxx
>905-212-6330
>fax: 905-602-8895
>-- 
>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>To post a message email: MIDRANGE-L@xxxxxxxxxxxx
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>Before posting, please take a moment to review the archives
>at http://archive.midrange.com/midrange-l.