RE: FTPS using self-signed certificate

Have them send you their certificate and use DCM to add it to your
iSeries as a trusted Certificate Authority.  Hoops but much more secure.



Christopher Bipes
Information Services Director
CrossCheck, Inc.

707.586.0551, ext. 1102
707.585.5700 FAX

Chris.Bipes@xxxxxxxxxxxxxxx
www.Cross-Check.com

Notice of Confidentiality: This e-mail, and any attachments thereto, is
intended only for use by the addressee(s) named herein and may contain
legally privileged and/or confidential information.  If you are not the
intended recipient of this e-mail, you are hereby notified that any
dissemination, distribution or copying of this e-mail, and any
attachments thereto, is strictly prohibited.  If you have received this
e-mail in error, please immediately notify me by e-mail (by replying to
this message) or telephone (noted above) and permanently delete the
original and any copy of any e-mail and any printout thereof.  Thank you
for your cooperation with respect to this matter.


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Douglas Handy
Sent: Tuesday, December 06, 2005 12:14 PM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: FTPS using self-signed certificate

I'm trying to establish an implicit FTPS session to a host which is
providing a self-signed certificate.  Upon connection, I get error
TCP3D2C
(Secure connection error, return code -23) and the help text for -23 is
"Certificate is not signed by a trusted certificate authority"

Is there any way to configure it to accept a self-signed certificate?  I
have CHGFTPA set to ALWSSL(*YES).

The goal is just to get encryption on FTP transfers to a static IP host
site
used for staging files, so having a trusted certificate authority issued
certificate doesn't seem like it should be necessary.  Although I admit
DCM
is an area where i have no experience yet.