Re: FTP client with Digital Certificate

Sorry to reply to my own email but I just read a little further.

What I ended up doing was importing the certificate, defined it to the
trusted CA list and applied it to the FTP client.  I posted the process I
followed to the list so it should be in the archives.

Gord

>On Fri, 28 Oct 2005 08:23:43 -0400, Gord Hutchinson <gordm1@xxxxxxxxxxxxxxx> 
>wrote:

>I dug out my notes from when I implemented this last year.  
>
>Are you talking about a user certificate or a CA certificate?  The CA
>certificate can be imported and applied to the FTP client.  Quoting the IBM
>contact I had at the time "...user certificates are not usable by the FTP
>client in OS/400 at this time".
>
>
>Gord
>
>>On Thu, 27 Oct 2005 12:51:57 -0700, "Eric Kempter" <EKempter@xxxxxxxxxxxxxxx> 
>>wrote:
>
>>Gord,
>>
>>     The FTP client supports SSL without a problem.  It's the digital 
>> certificate that is the problem.  Apparently the digital certificate only 
>> works on the ftp server (for incoming ftp), not the ftp client (for outgoing 
>> ftp).  Why would IBM implement digital certificates and not include the ftp 
>> client?  Windows does it, UNIX does it. ISeries doesn't?
>>
>> -----Original Message-----
>>From:         midrange-l-bounces@xxxxxxxxxxxx 
>>[mailto:midrange-l-bounces@xxxxxxxxxxxx]  On Behalf Of Gord Hutchinson
>>Sent: Thursday, October 27, 2005 12:01 PM
>>To:   Midrange Systems Technical Discussion
>>Subject:      Re: FTP client with Digital Certificate
>>
>>Maybe I'm misunderstanding something but I am doing secure FTP using the
>>as/400 FTP client.  Other than the certificates, the only thing I'm doing
>>different than normal FTP is using port 990.
>>
>>
>>Gord
>>
>>>On Wed, 26 Oct 2005 10:15:31 -0700, "Eric Kempter" 
>>><EKempter@xxxxxxxxxxxxxxx> wrote:
>>
>>>IBM has stated that the ftp client does not support digital certificates.  
>>>I'm hoping that someone on the list can prove them wrong.
>>>
>>> -----Original Message-----
>>>From:        midrange-l-bounces@xxxxxxxxxxxx 
>>>[mailto:midrange-l-bounces@xxxxxxxxxxxx]  On Behalf Of Eric Kempter
>>>Sent:        Wednesday, October 26, 2005 9:23 AM
>>>To:  Midrange Systems Technical Discussion
>>>Subject:     RE: FTP client with Digital Certificate
>>>
>>>Most definitely.  IBM has verified that our set up is correct.
>>>
>>> -----Original Message-----
>>>From:        midrange-l-bounces@xxxxxxxxxxxx 
>>>[mailto:midrange-l-bounces@xxxxxxxxxxxx]  On Behalf Of Chris Bipes
>>>Sent:        Wednesday, October 26, 2005 8:39 AM
>>>To:  Midrange Systems Technical Discussion
>>>Subject:     RE: FTP client with Digital Certificate
>>>
>>>Did you import the client certificate in to your server? 
>>>
>>>
>>>Chris Bipes
>>>Information Services Director
>>>CrossCheck, Inc.
>>>
>>>-----Original Message-----
>>>From: midrange-l-bounces@xxxxxxxxxxxx
>>>[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Eric Kempter
>>>Sent: Wednesday, October 26, 2005 8:26 AM
>>>To: Midrange Systems Technical Discussion
>>>Subject: RE: FTP client with Digital Certificate
>>>
>>>We keep trying but it isn't working - the certificate doesn't appear to
>>>pass.  Has anyone set this up successfully?
>>>
>>>-- 
>>>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>>>To post a message email: MIDRANGE-L@xxxxxxxxxxxx
>>>To subscribe, unsubscribe, or change list options,
>>>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>>>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>>>Before posting, please take a moment to review the archives
>>>at http://archive.midrange.com/midrange-l.
>>>
>>>
>>>
>>>
>>>-- 
>>>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>>>To post a message email: MIDRANGE-L@xxxxxxxxxxxx
>>>To subscribe, unsubscribe, or change list options,
>>>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>>>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>>>Before posting, please take a moment to review the archives
>>>at http://archive.midrange.com/midrange-l.
>>
>>-- 
>>Gord Hutchinson
>>Database Administrator, IT
>>TST Overland Express
>>ghutchinson@xxxxxxxxxxxxxxx
>>905-212-6330
>>fax: 905-602-8895
>>-- 
>>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>>To post a message email: MIDRANGE-L@xxxxxxxxxxxx
>>To subscribe, unsubscribe, or change list options,
>>visit: http://lists.midrange.com/mailman/listinfo/midrange-l
>>or email: MIDRANGE-L-request@xxxxxxxxxxxx
>>Before posting, please take a moment to review the archives
>>at http://archive.midrange.com/midrange-l.
>
>-- 
>Gord Hutchinson
>Database Administrator, IT
>TST Overland Express
>ghutchinson@xxxxxxxxxxxxxxx
>905-212-6330
>fax: 905-602-8895